microsoft report viewer

Name: microsoft report viewer
Brand: microsoft

productUS

cpe:2.3:a:microsoft:report_viewer:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical12high1medium0low

updated 2026-10-28

vulnerabilities (13)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2007-5348US	high9.3	52.9% (99th)	Exploit	no fix	2008-09-11	2 versions
CVE-2008-3013US	high9.3	52.1% (99th)	Exploit	no fix	2008-09-11	2 versions
CVE-2011-1976US	medium4.3	20.8% (98th)	Exploit	no fix	2011-08-10	= 2005
CVE-2008-3015US	high9.3	39.3% (99th)	—	no fix	2008-09-11	2 versions
CVE-2008-3014US	high9.3	36.7% (98th)	—	no fix	2008-09-11	2 versions
CVE-2008-3012US	high9.3	31.0% (98th)	—	no fix	2008-09-11	2 versions
CVE-2009-2501US	high9.3	26.7% (98th)	—	no fix	2009-10-14	2 versions
CVE-2009-2500US	high9.3	23.6% (98th)	—	no fix	2009-10-14	2 versions
CVE-2009-3126US	high9.3	23.5% (98th)	—	no fix	2009-10-14	2 versions
CVE-2009-2503US	high9.3	22.2% (98th)	—	no fix	2009-10-14	2 versions
CVE-2009-2502US	high9.3	22.0% (98th)	—	no fix	2009-10-14	2 versions
CVE-2009-2504US	high9.3	21.0% (98th)	—	no fix	2009-10-14	2 versions
CVE-2009-2528US	high9.3	20.5% (97th)	—	no fix	2009-10-14	2 versions

The flaw types (CWEs) most of these CVEs share.

CWE-189CWE-1895 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer4 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')2 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs
CWE-399CWE-3991 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.