Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2012-1856

🗓️ 15 Aug 2012 01:00:00Reported by microsoftType 
cve
 cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 1240 Views

The TabStrip ActiveX control in MSCOMCTL.OCX in Microsoft Office and SQL Server allows remote attackers to execute arbitrary code via crafted document or web page, aka "MSCOMCTL.OCX RCE Vulnerability.

Related
Detection
Refs
Social
ReporterTitlePublishedViews
Family
ATTACKERKB		Microsoft Windows TabStrip MSCOMCTL.OCX RCE Vulnerability
15 Aug 201200:00
–attackerkb
Circl		CVE-2012-1856
25 Aug 201509:05
–circl
CISA KEV Catalog		Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability
3 Mar 202200:00
–cisa_kev
Check Point Advisories		Microsoft Windows Common Controls Remote Code Execution (MS12-060; CVE-2012-1856)
14 Aug 201200:00
–checkpoint_advisories
Check Point Advisories		Microsoft Windows Common Controls Remote Code Execution - Ver2 (CVE-2012-1856)
31 Mar 201400:00
–checkpoint_advisories
Cvelist		CVE-2012-1856
15 Aug 201201:00
–cvelist
Microsoft KB		MS12-060: Vulnerability in Windows common controls could allow remote code execution: August 14, 2012
14 Aug 201200:00
–mskb
myhack58		The macro perspective of the office vulnerability, 2010-2018-a vulnerability warning-the black bar safety net
13 Jun 201900:00
–myhack58
NVD		CVE-2012-1856
15 Aug 201201:55
–nvd
OpenVAS		Microsoft Windows Common Controls Remote Code Execution Vulnerability (2720573)
15 Aug 201200:00
–openvas
Rows per page
NVD
Node
microsoftcommerce_serverMatch2002sp4
OR
microsoftcommerce_serverMatch2007sp2
OR
microsoftcommerce_serverMatch2009
OR
microsoftcommerce_serverMatch2009r2
OR
microsofthost_integration_serverMatch2004sp1
OR
microsoftofficeMatch2003sp3
OR
microsoftofficeMatch2007sp2
OR
microsoftofficeMatch2007sp3
OR
microsoftofficeMatch2010sp1x86
OR
microsoftoffice_web_componentsMatch2003sp3
OR
microsoftsql_serverMatch2000sp4
OR
microsoftsql_serverMatch2000sp4analysis_services
OR
microsoftsql_serverMatch2005sp3express_advanced_services
OR
microsoftsql_serverMatch2005sp4
OR
microsoftsql_serverMatch2008r2_sp1
OR
microsoftsql_serverMatch2008r2_sp2
OR
microsoftsql_serverMatch2008sp2
OR
microsoftsql_serverMatch2008sp3
OR
microsoftvisual_basicMatch6.0
OR
microsoftvisual_foxproMatch8.0sp1
OR
microsoftvisual_foxproMatch9.0sp2

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
22 Apr 2026 16:48Current
7.9High risk
Vulners AI Score7.9
CVSS 3.18.8
CVSS 29.3
EPSS0.91552
SSVC
In Wild
mscomctl.ocxactivexmicrosoft officesql serverremote code executionvulnerability
1240