4984 matches found
CVE-2021-42292
CVE-2021-42292 This package will detect exploits of CVE-2021-42292, a Microsoft Excel local privilege escalation vulnerability, and generate a notice in notice.log for it. https://corelight.com/blog/detecting-cve-2021-42292 Detection Method: This package detects the vulnerability when the...
excelpeek
ExcelPeek v0.2 ExcelPeek is a tool designed to help investigate potentially malicious Microsoft Excel files. Documentation Use the Installation Guide to get started. Go to the User's Guide for additional information...
CVE-2023-23396
CVE-2023-23396 Here you can download the exploit. Here you can read my report. Here you can buy me a unicorn 🦄 PS At the time of writing 2023-04-07 the client version of Microsoft Excel is still vulnerable here's more information. Share the Knowledge!...
ExploitPOC_MS15-014_CVE-2015-0009
This repository does not have a README...
CVE-2026-111127
A flaw was found in catdoc. An attacker can exploit this vulnerability by convincing a user to process a specially crafted Microsoft Excel .xls file. Because the application fails to properly validate string lengths when parsing spreadsheet records, it reads beyond allocated memory buffers. This...
Microsoft Excel Code Execution
The vulnerability of Microsoft Excel spreadsheet editors within the Microsoft Office and Microsoft 365 Apps for Enterprise software packages is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
Microsoft Excel Remote Code Execution Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
Microsoft Office: CVE-2026-97741: Microsoft Excel: CVE-2026-97741
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
PT-2026-116217
Уязвимость редактора электронных таблиц Microsoft Excel пакетов программ Microsoft Office и Microsoft 365 Apps for Enterprise связана с целочисленным переполнением. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...
EUVD-2026-92421
URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information could be exfiltrated to a remote server on opening a document containing such links. The check added for CVE-2024-12426 did not cover every place a document can supply a URL...
Security Updates for Microsoft Excel Products C2R (September 2026)
The Microsoft Excel Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. CVE-2026-78518 - Heap-based buffer overflow in Microsoft Office Excel...
Security Updates for Microsoft Excel Products (September 2026)
The Microsoft Excel Products are missing a security update. They are, therefore, affected by multiple vulnerabilities: - Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network. CVE-2026-78512 - Out-of-bounds read in Microsoft Office Excel...
CVE-2026-81950
Double free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-81951
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-81393
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...
CVE-2026-81394
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...
EUVD-2026-73878
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
EUVD-2026-73874
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...