CVE-2010-3236

CVE-2010-3236 – Out Of Bounds Array Vulnerability arises from Excel’s handling of certain records, allowing remote code execution if a user opens a specially crafted Excel file. Affected products listed across connected docs include Microsoft Excel 2002 SP3, Excel 2003 SP3, Microsoft Office 2004 ...

CVE-2016-3361

CVE-2016-3361 is a memory corruption vulnerability in Microsoft Office Excel 2010 SP2. A crafted document can cause remote code execution by improperly handling objects in memory, enabling an attacker to run arbitrary code in the context of the current user. Remediation is available via the Micro...

CVE-2025-54901

CVE-2025-54901 affects Microsoft Excel (Office) with a buffer over-read that could allow a local attacker to disclose information. The CVE is linked to a Microsoft Excel information-disclosure vulnerability (CVE-2025-54901) with confirmed public references; the contribution notes indicate an info...

CVE-2026-21261

CVE-2026-21261 describes an out-of-bounds read in Microsoft Excel that could allow a local attacker to disclose information. The issue affects Excel, with the root cause described as an out-of-bounds read in handling certain data, resulting in information disclosure (no impact on integrity or ava...

CVE-2026-55899

Microsoft Excel is affected by a stack-based buffer overflow (CVE-2026-55899) that can allow a local attacker to execute code with high impact. The CVSS indicates local access with user interaction required and high confidentiality/integrity/availability impact. Root cause: overflow in Excel’s ha...

CVE-2026-55024

CVE-2026-55024 – Microsoft Excel remote code execution . The vulnerability is described as an access of resource using incompatible type (type confusion) in Microsoft Office Excel, enabling an unauthorized attacker to execute code locally. Connected advisories (NCSC, ZDI, ENISA ENISA-style) indic...

CVE-1999-0794

Issue summary : Microsoft Excel does not warn users when a macro is present inside a Symbolic Link (SYLK) format file. What is affected : Excel’s handling of SYLK files containing macros (no warning prompt to the user). Root cause / nature of vulnerability : Absence of user warning in the SYLK ma...

CVE-2006-0029

CVE-2006-0029 is a remote code execution vulnerability in Microsoft Excel affecting Excel 2000, 2002, and 2003 via a data file containing a malformed description that can corrupt memory. The Microsoft Security Bulletin MS06-012 provides fixes for this issue across affected Office/Excel versions (...

CVE-2010-3235

CVE-2010-3235 (Formula Biff Record Vulnerability) is a remote-code-execution flaw in Excel’s handling of formula information. The Microsoft Excel Formula Biff Record parsing path can be corrupted by specially crafted Excel files, enabling arbitrary code execution when opened by a user. Affected p...

CVE-2025-62556

Microsoft Excel remote code execution vulnerability CVE-2025-62556 is triggered by an untrusted pointer dereference in Excel, enabling local code execution. The issue is tied to Microsoft Office Excel components; multiple Nessus/NCSC/EUVD listings corroborate the family of Office Excel vulnerabil...

CVE-2008-0114

CVE-2008-0114 describes a remote code execution vulnerability in Microsoft Excel’s handling of Style records. It affects Excel 2000 SP3 through 2003 SP2, Excel Viewer 2003, and Office for Mac 2004. The underlying issue is a memory handling error that occurs when loading specially crafted Excel fi...

CVE-2010-3238

CVE-2010-3238 is a Remote Code Execution in Microsoft Excel via a crafted Excel file that abuses a memory handling error when parsing binary file-format information (Negative Future Function). Affected products include Microsoft Excel 2002 SP3, Excel 2003 SP3, and Office 2004 for Mac. The vulnera...

CVE-2025-54904

CVE-2025-54904 is a use-after-free vulnerability in Microsoft Office Excel that allows an authenticated local attacker to execute code. The issue affects Excel/Office components and results in a local code execution impact with high severity. Microsoft has released a security update (KB5002776) t...

CVE-2002-0616

CVE-2002-0616 refers to the Excel Inline Macros vulnerability in Microsoft Excel 2000/2002 for Windows. The Macro Security Model allows remote attackers to execute code by attaching an inline macro to an object within an Excel workbook. Affected products are Excel 2000 and 2002 on Windows; the un...

CVE-2002-1143

Affected software: Microsoft Word and Microsoft Excel (Office suite). Vulnerability: information disclosure via field codes in Word (INCLUDETEXT) and external updates in Excel, allowing remote attackers to insert and exfiltrate local data when a document is returned to the attacker. Root cause: m...

CVE-2026-81393

CVE-2026-81393 is an out-of-bounds read vulnerability in Microsoft Office Excel that allows an unauthorized local attacker to disclose information . The CVSS 3.1 score is 5.5 (MEDIUM) , reflecting a local attack vector , no privileges required , but user interaction required (e.g., opening a craf...

CVE-2007-3029

CVE-2007-3029 details (normal mode) : Affected software is Microsoft Excel 2002 SP3 and Excel 2003 SP2. The root cause is Excel’s insufficient data validation when processing the number of active worksheets (Worksheet Memory Corruption Vulnerability), which can lead to memory corruption. An attac...

CVE-2026-20946

CVE-2026-20946 is an Out-of-bounds read in Microsoft Office Excel that allows local code execution. Connected sources confirm Excel/Office impact and provide remediation via the January 2026 security updates (e.g., KB5002831 for Excel 2016; MSRC update guidance). Affected products include Excel 2...

CVE-2026-81389

CVE-2026-81389 is a heap-based buffer overflow in Microsoft Office Excel that allows an unauthorized attacker to execute code locally. The vulnerability requires user interaction and has a high attack complexity , but no prior privileges are needed. The CVSS 3.1 score is 7.0 (HIGH) with full impa...

CVE-2026-81390

CVE-2026-81390 is an out-of-bounds read vulnerability in Microsoft Office Excel that allows an unauthorized attacker to disclose information locally . The attack requires user interaction (e.g., opening a crafted file) and no prior privileges. The CVSS 3.1 base score is 5.5 (Medium) with High con...

CVE-2025-54898

CVE-2025-54898 is a Microsoft Excel remote code execution vulnerability: an out-of-bounds read in Excel allows an attacker to run code locally on a user’s machine, with a local attack vector, no privileges required, and user interaction needed. The CVSS 3.1 vector is CVSS:3.1/AV:L/AC:L/PR:N/UI:R/...

CVE-2026-81394

CVE-2026-81394 is an information disclosure vulnerability in Microsoft Office Excel . Exposure of sensitive system information to an unauthorized control sphere allows a local, unprivileged attacker to disclose information, provided the target user interacts with a crafted file. The CVSS 3.1 scor...

CVE-2000-0637

Microsoft Excel 97 and 2000 are affected by a vulnerability in the Register.ID function that allows an attacker to trigger execution of arbitrary commands by specifying a malicious .dll; impact is arbitrary commands with local access. The provided documents do not include exploitation details or ...

CVE-2026-40360

CVE-2026-40360 is an information-disclosure vulnerability in Microsoft Excel caused by an out-of-bounds read, enabling a local attacker to disclose data. The available documents identify the affected product as Microsoft Excel and describe a local attack that could lead to confidential informatio...

CVE-2006-1309

CVE-2006-1309 is a Microsoft Excel vulnerability affecting Excel 2000–2004 where opening a crafted .xls file with a malformed LABEL record can trigger memory corruption and allow remote code execution. The underlying issue is memory corruption during processing of the LABEL record, potentially en...

CVE-2025-54899

CVE-2025-54899 is an Excel Remote Code Execution vulnerability due to heap memory management error in Microsoft Excel/Office components (freeing memory on the heap). The CVE has a 3.1 base score of 7.8 (HIGH) with LOCAL exploit and USER INTERACTION required, per Microsoft advisory. Public referen...

CVE-2025-59231

CVE-2025-59231 is a Microsoft Excel vulnerability described as a type-confusion in Excel that could allow an attacker with local access to execute code on the affected system. The associated Nessus findings and Microsoft advisories indicate multiple October 2025 office updates address this and re...

CVE-1999-1055

CVE-1999-1055 (Microsoft Excel 97) vulnerabilities allow a malicious workbook to run arbitrary commands via the CALL worksheet function without warning. Affects Excel 97; root cause: worksheet functions can execute a malicious DLL. According to NVD, the issue has a base score of 7.5 (HIGH) with N...

CVE-2025-54900

CVE-2025-54900 is a Microsoft Excel remote code execution vulnerability described as a heap-based buffer overflow in Excel that allows an attacker with local access to run code on the affected system. The CVE is documented for Microsoft Office Excel/Office products and is tracked with a high impa...

CVE-2025-62560

Microsoft Excel/Office contains a local-code-execution vulnerability due to an untrusted pointer dereference in Excel. Affected product: Microsoft Excel (part of Microsoft Office). Root cause: untrusted pointer dereference within Excel’s code path. Impact: local code execution with high confident...

CVE-2026-21258

CVE-2026-21258 is an Excel-related vulnerability described as improper input validation that could allow a local attacker to disclose information. The metric indicates a medium-severity CVSS v3.1 base score of 5.5 (LOCAL, low attack complexity, no privileges required, user interaction required) w...

CVE-2026-81386

Microsoft Office Excel is affected by a heap-based buffer overflow that allows an unauthorized attacker to execute code locally after a user opens a crafted file. The CVSS 3.1 score is 7.8 (High) with a local attack vector, low complexity, no privileges required, and user interaction required, re...

CVE-2026-81396

CVE-2026-81396 is a stack-based buffer overflow in Microsoft Office Excel that allows an unauthorized attacker to execute code locally. The vulnerability requires user interaction (e.g., opening a malicious file) but does not require prior privileges, with a CVSS 3.1 score of 7.8 (HIGH) . The pri...

CVE-2026-81397

CVE-2026-81397 is a heap-based buffer overflow in Microsoft Office Excel that allows an unauthorized attacker to execute code locally. The attack vector is local with low complexity and no privileges required, though user interaction is required (e.g., opening a crafted file). The CVSS 3.1 score ...

CVE-2025-53739

Microsoft Excel remote code execution via a type confusion error (CVE-2025-53739) affects Office Excel engines when handling specially crafted files. The issue is described as an incompatible type resource access leading to local code execution. Publicly documented impact states attacker-controll...

CVE-2025-53741

CVE-2025-53741 is a Microsoft Excel remote code execution vulnerability caused by a heap-based buffer overflow in Excel. The CVE is linked to Office/Excel components and is rated HIGH (CVSS: LOCAL, LOW-EXPLOITABILITY, requiring user interaction). Corporate advisories and MSRC update guides indica...

CVE-2025-59223

CVE-2025-59223 is a Microsoft Excel remote code execution vulnerability caused by a use-after-free in Excel. Connected sources confirm this CVE is part of a broader October 2025 Office/Excel/Mac updates package and is addressed by security updates from Microsoft (e.g., KB5002794 for Excel 2016) a...

CVE-2026-81400

An out-of-bounds read vulnerability in Microsoft Office Excel allows an unauthorized local attacker to disclose information. The CVSS 3.1 score is 5.5 (MEDIUM) with a local attack vector, no privileges required, and user interaction required, resulting in a high impact to confidentiality with no ...

CVE-2026-81391

CVE-2026-81391 is an information disclosure vulnerability in Microsoft Office Excel caused by a use of uninitialized resource . An unauthorized local attacker with user interaction can disclose information, rated CVSS 5.5 (Medium) with high confidentiality impact but no integrity or availability ...

CVE-2026-81395

CVE-2026-81395 is an out-of-bounds read in Microsoft Office Excel that allows an unauthorized attacker to disclose information locally. The CVSS 3.1 score is 5.5 (MEDIUM) with a local attack vector, low complexity, no privileges required, and user interaction required, resulting in high confident...

CVE-2025-62201

CVE-2025-62201 is a Microsoft Excel remote code execution vulnerability. Connected sources confirm a heap-based buffer overflow in Excel that can let an attacker run arbitrary code on the affected system. Affected product: Microsoft Office Excel. Root cause: heap-based buffer overflow in Excel co...

CVE-2025-60726

Microsoft Excel is affected by CVE-2025-60726 (Out-of-bounds read) which enables a local attacker to disclose sensitive data. The vulnerability is described as a information disclosure in Excel, with CVSS 3.1 score 7.1 (High) and local attack vector requiring user interaction. Connected sources c...

CVE-2025-59225

CVE-2025-59225 is a Microsoft Excel Remote Code Execution vulnerability caused by a use-after-free. The vulnerability allows a local attacker to execute code on a vulnerable system. Various security advisories and update plugins confirm Excel-related fixes in October 2025 releases (MSRC/KB5002794...

CVE-2025-62203

CVE-2025-62203 is a use-after-free vulnerability in Microsoft Excel (part of Microsoft Office ) that can allow a local attacker to achieve remote code execution . The issue arises in Excel’s handling of certain objects, enabling an attacker to run arbitrary code on the affected system with the us...

CVE-2025-62202

CVE-2025-62202 is an out-of-bounds read vulnerability in Microsoft Excel that can allow a local attacker to disclose information. Connected sources confirm the issue in Microsoft Excel/Office components and indicate a coordinated patch release in November 2025 (e.g., Office/Excel security updates...

CVE-2025-62561

CVE-2025-62561 is Microsoft Excel remote code execution due to an untrusted pointer dereference in Office Excel. The vulnerability affects Microsoft Excel as part of the Office suite; exploitation would allow code execution on a local host. Connected advisories confirm the issue in Excel and list...

CVE-2026-21259

CVE-2026-21259 is a heap-based buffer overflow in Microsoft Excel (Office) that enables local privilege escalation. Multiple sources (MSRC advisory, CNVD, CIRCL sightings, KB entries) confirm Excel as the affected product and indicate that Microsoft released February 2026 security updates (e.g., ...

CVE-2025-59233

CVE-2025-59233 is a Microsoft Excel remote code execution vulnerability caused by a resource access/type confusion issue in Excel/Office. The issue allows an attacker with local access to cause code execution on the vulnerable system, with the CVSS v3.1 base score 7.8 (HIGH): Local attack vector,...

CVE-2025-59224

CVE-2025-59224 affects Microsoft Excel (Office) with a use-after-free in Excel that allows local code execution. The CVSSv3.1 base metrics indicate a HIGH impact, with local attack vector, no user privileges required, and user interaction needed. Microsoft and partners reference security updates ...

CVE-2026-81387

CVE-2026-81387 is an information disclosure vulnerability in Microsoft Office Excel . It allows an unauthorized attacker with local access to expose sensitive system information, requiring user interaction and no prior privileges. The CVSS v3.1 score is 5.5 (MEDIUM) , with high confidentiality im...