CVE-2006-3014
NoneCVSS
—
EPSS
30.1%
Published
Jun 22, 2006
CISA due date
—
The record
Microsoft Excel allows user-assisted attackers to execute arbitrary javascript and redirect users to arbitrary sites via an Excel spreadsheet with an embedded Shockwave Flash Player ActiveX Object, which is automatically executed when the user opens the spreadsheet.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-53713 Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or… CWE-20
- CVE-2026-55371 OpenEXR is the reference implementation and specification for the EXR high-dynamic-range… CWE-20
- CVE-2026-75975 fast-uri is a URI parser for Node.js. CWE-20
- CVE-2026-53587 libgit2 is a portable C implementation of the Git core methods provided as a linkable… CWE-20
- CVE-2026-61711 BuildKit is a toolkit for converting source code to build artifacts in an efficient… CWE-20
- CVE-2026-18504 fastify is a fast and low overhead web framework for Node.js. CWE-20
- CVE-2026-63335 The RabbitMQ Java client library allows Java and JVM-based applications to connect to and… CWE-20
- CVE-2026-61634 The RabbitMQ Java client library allows Java and JVM-based applications to connect to and… CWE-20