396 matches found
CVE-2025-21364
CVE-2025-21364 is a Microsoft Excel security feature bypass vulnerability affecting Office Excel. The connected sources confirm the issue as a bypass in Excel’s security features, with the CVE described as a “Security Feature Bypass Vulnerability.” The provided metrics from the initial document i...
CVE-2025-21354 Microsoft Excel Remote Code Execution Vulnerability
...
Microsoft Excel Remote Code Execution Vulnerability
...
Description of the security update for Office Online Server: January 14, 2025 (KB5002677)
None None...
Microsoft Excel Remote Code Execution Vulnerability
...
PT-2025-1222 · Microsoft · Office Excel
Name of the Vulnerable Software and Affected Versions: Microsoft Excel versions are affected, but specific versions are not provided in the input data. Description: The issue allows remote attackers to execute arbitrary code and affect the system. No information is provided about the estimated...
CVE-2024-55878
SimpleXLSX is software for parsing and retrieving data from Excel XLSx files. Starting in version 1.0.12 and prior to version 1.1.12, when calling the extended toHTMLEx method, it is possible to execute arbitrary JavaScript code. Version 1.1.12 fixes the issue. As a workaround, don't use direct...
Vulnerability of Microsoft Office packages, 365 Apps for Enterprise, and Excel, related to the use of memory after it is freed, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Office packages, 365 Apps for Enterprise, and Excel relates to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Microsoft Excel Remote Code Execution Vulnerability
...
Microsoft Excel Remote Code Execution Vulnerability (CNVD-2024-45315)
Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A remote code execution vulnerability exists in Microsoft Excel, which can be exploited by an attacker to execute arbitrary code on a system...
Microsoft Excel Remote Code Execution Vulnerability (CNVD-2024-45318)
Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A remote code execution vulnerability exists in Microsoft Excel, which can be exploited by an attacker to execute arbitrary code on a system...
Description of the security update for Office Online Server: November 12, 2024 (KB5002648)
None None...
PT-2024-6768 · Microsoft · 365 Apps For Enterprise +3
Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Microsoft Office affected versions not specified Microsoft Office Long Term Servicing Channel affected versions not specified...
CVE-2024-38170
Microsoft Excel Remote Code Execution Vulnerability...
Microsoft Excel 安全漏洞
Microsoft Excel is a spreadsheet processing software in the Office suite of Microsoft Corporation USA. A security vulnerability exists in Microsoft Excel. An attacker could exploit the vulnerability to remotely execute code. The following products and versions are affected:Microsoft 365 Apps for...
Microsoft Office Excel XLW File Parsing Memory Corruption Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Office Excel. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...
Microsoft Office for Mac Remote Code Execution Vulnerability (May 2024) - Mac OS X
This host is missing an important security update for Microsoft Office 2019 for Mac according to Microsoft security update May 2024 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Vulnerabilities fixed in Microsoft Office
Microsoft has fixed vulnerabilities in Excel and Sharepoint. A malicious party can exploit the vulnerabilities to execute arbitrary code execute with the victim's privileges, or gain access to sensitive data. Successful exploitation requires the malicious party to trick the victim into opening a...
Vulnerabilities fixed in Microsoft Office
Microsoft has fixed vulnerabilities in Excel and Sharepoint. The vulnerability in Excel allows a malicious person to execute arbitrary code with the victim's privileges. For successful exploitation, the malicious party must trick the victim into opening a rogue file. The vulnerability in Sharepoi...
Hackers Exploiting MS Excel Vulnerability to Spread Agent Tesla Malware
Attackers are weaponizing an old Microsoft Office vulnerability as part of phishing campaigns to distribute a strain of malware called Agent Tesla. The infection chains leverage decoy Excel documents attached in invoice-themed messages to trick potential targets into opening them and activate the...