Read the docs

Microsoft

Records18046All Threatist records
Exploited (KEV)406In CISA KEV
CVSS critical2330CVSS 9.0–10.0
CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

502 records in Excel · all components

Priority CRITICAL 97KEV

Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1; Excel Viewer 2003 Gold and SP3; Excel Viewer; Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1; and Excel in Microsoft Office 200…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.42941 Published 2009-02-25 No fix listed CWE-94
Priority CRITICAL 97KEV

Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as demonstrat…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.44099 Published 2007-02-03 No fix listed
Priority CRITICAL 93KEV

Microsoft Excel Security Feature Bypass Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.43005 Published 2021-11-10 Fixed in https://aka.ms/OfficeSecurityReleases, 15.0.5397.1001 +2
Priority CRITICAL 93KEV

Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer 2003 SP3; Office Excel Viewer SP1 and SP2; and Office Compatibili…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.84034 Published 2009-11-11 No fix listed CWE-787
Priority HIGH 83

Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via crafted macros, aka "Macro Validation Vulne…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.57908 Published 2008-01-16 No fix listed CWE-908
Priority HIGH 77

Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac obtain a certain length value from an uninitialized memory location, which allows remote attackers to trigger a buffer ov…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.70166 Published 2011-04-13 No fix listed CWE-119
Priority HIGH 77

Stack-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file wit…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.70121 Published 2010-06-08 No fix listed CWE-94
Priority HIGH 74

A library injection vulnerability exists in Microsoft Excel 16.83 for macOS.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00742 Published 2024-12-18 No fix listed CWE-347
Priority HIGH 72

Stack-based buffer overflow in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1; Office Excel Viewer 2003 SP3; Office Excel Viewer; Office Compatibility Pack for Word, Excel, and PowerPoint 200…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.52318 Published 2008-10-15 No fix listed CWE-787
Priority HIGH 71

Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2007, Viewer 2003, Compatibility Pack, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via crafted data validation rec…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.50862 Published 2008-03-11 No fix listed CWE-94
Priority HIGH 71

Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM fiel…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.49024 Published 2004-09-17 No fix listed
Priority HIGH 70

Microsoft Excel Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.51673 Published 2021-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 15.0.5363.1000 +3
Priority HIGH 69

Microsoft Excel Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.56727 Published 2023-11-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.79.23111019 +1 CWE-416
Priority HIGH 68

Microsoft Excel Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.53513 Published 2023-06-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.74.23061100 +3 CWE-125
Priority HIGH 67

Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2007, Viewer 2003, Compatibility Pack, and Office for Mac 2004 allows user-assisted remote attackers to execute arbitrary code via malformed formulas, aka "Ex…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.39333 Published 2008-03-11 No fix listed CWE-94
Load more
Open these records in search →