Excel Security Vulnerabilities and Issues — Page 2 of Excel CVE List

Lucene search

MicrosoftExcel

357 matches found

CVE•added 2024/10/08 6:15 p.m.•141 views

CVE-2024-43504

Microsoft Excel Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.01202EPSS

CVE•added 2023/11/14 6:15 p.m.•139 views

CVE-2023-36037

Microsoft Excel Security Feature Bypass Vulnerability

7.8CVSS7.5AI score0.00197EPSS

CVE•added 2019/09/11 10:15 p.m.•137 views

CVE-2019-1263

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosure Vulnerability'.

5.5CVSS6AI score0.1377EPSS

CVE•added 2023/06/14 12:15 a.m.•135 views

CVE-2023-33133

Microsoft Excel Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.14181EPSS

CVE•added 2020/12/10 12:15 a.m.•134 views

CVE-2020-17129

Microsoft Excel Remote Code Execution Vulnerability

9.3CVSS7.8AI score0.06001EPSS

CVE•added 2024/11/12 6:15 p.m.•134 views

CVE-2024-49026

Microsoft Excel Remote Code Execution Vulnerability

7.8CVSS7.9AI score0.00175EPSS

CVE•added 2013/09/11 2:3 p.m.•133 views

CVE-2013-1315

Microsoft SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013; Office Web Apps 2010; Excel 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office for Mac 2011; Excel Viewer; and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (...

9.3CVSS7.6AI score0.69342EPSS

CVE•added 2011/04/13 6:55 p.m.•132 views

CVE-2011-0097

Integer underflow in Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute arbitrary code ...

9.3CVSS7.6AI score0.63845EPSS

CVE•added 2012/05/09 12:55 a.m.•131 views

CVE-2012-0141

Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2011 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 do not properly handle memory during the opening of files, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Fi...

9.3CVSS7.5AI score0.64174EPSS

CVE•added 2009/11/11 8:30 p.m.•130 views

CVE-2009-3130

Heap-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via a spreadsheet containing a malformed Binary File Format (aka BIFF) record that triggers memory corruption, ak...

9.3CVSS7.7AI score0.63952EPSS

CVE•added 2012/05/09 12:55 a.m.•130 views

CVE-2012-0143

Microsoft Excel 2003 SP3 and Office 2008 for Mac do not properly handle memory during the opening of files, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Memory Corruption Using Various Modified Bytes Vulnerability."

9.3CVSS7.5AI score0.60557EPSS

CVE•added 2021/05/11 7:15 p.m.•130 views

CVE-2021-31178

Microsoft Office Information Disclosure Vulnerability

5.5CVSS6.1AI score0.14912EPSS

CVE•added 2022/02/09 5:15 p.m.•130 views

CVE-2022-22716

Microsoft Excel Information Disclosure Vulnerability

5.5CVSS5.4AI score0.0158EPSS

CVE•added 2012/11/14 12:55 a.m.•129 views

CVE-2012-1885

Heap-based buffer overflow in Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Office 2008 and 2011 for Mac; and Office Compatibility Pack SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel SerAuxErrBar Heap Overflow Vulnerability."

9.3CVSS7.9AI score0.65939EPSS

CVE•added 2011/06/16 8:55 p.m.•126 views

CVE-2011-1273

Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 do not properly validate record information during parsing of Ex...

9.3CVSS7.6AI score0.50077EPSS

CVE•added 2013/09/11 2:3 p.m.•126 views

CVE-2013-3158

Microsoft Excel 2003 SP3 and 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."

9.3CVSS7.6AI score0.52417EPSS

CVE•added 2020/12/10 12:15 a.m.•126 views

CVE-2020-17125

Microsoft Excel Remote Code Execution Vulnerability

9.3CVSS7.8AI score0.06001EPSS

CVE•added 2025/01/14 6:16 p.m.•126 views

CVE-2025-21362

Microsoft Excel Remote Code Execution Vulnerability

8.4CVSS7.8AI score0.00415EPSS

CVE•added 2020/04/15 3:15 p.m.•125 views

CVE-2020-0906

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0979.

9.3CVSS8.8AI score0.32912EPSS

CVE•added 2020/12/10 12:15 a.m.•124 views

CVE-2020-17127

Microsoft Excel Remote Code Execution Vulnerability

9.3CVSS7.8AI score0.06001EPSS

CVE•added 2020/08/17 7:15 p.m.•121 views

CVE-2020-1495

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administ...

9.3CVSS8.7AI score0.15901EPSS

CVE•added 2020/02/11 10:15 p.m.•120 views

CVE-2020-0759

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.

9.3CVSS8.8AI score0.32912EPSS

CVE•added 2021/05/11 7:15 p.m.•120 views

CVE-2021-31174

Microsoft Excel Information Disclosure Vulnerability

5.5CVSS6.1AI score0.00503EPSS

CVE•added 2021/01/12 8:15 p.m.•119 views

CVE-2021-1713

Microsoft Excel Remote Code Execution Vulnerability

7.8CVSS7.6AI score0.02899EPSS

CVE•added 2017/09/13 1:29 a.m.•118 views

CVE-2017-8631

A remote code execution vulnerability exists in Excel Services, Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2016, Microsoft Office Web Apps 2013, Microsoft Office Compatibility...

9.3CVSS7.6AI score0.27499EPSS

CVE•added 2021/04/13 8:15 p.m.•116 views

CVE-2021-28451

Microsoft Excel Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.04005EPSS

CVE•added 2021/10/13 1:15 a.m.•116 views

CVE-2021-40472

Microsoft Excel Information Disclosure Vulnerability

5.5CVSS5.9AI score0.00461EPSS

CVE•added 2021/10/13 1:15 a.m.•115 views

CVE-2021-40485

Microsoft Excel Remote Code Execution Vulnerability

7.8CVSS7.7AI score0.00865EPSS

CVE•added 2021/07/14 6:15 p.m.•114 views

CVE-2021-34518

Microsoft Excel Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.00732EPSS

CVE•added 2024/05/14 5:17 p.m.•114 views

CVE-2024-30042

Microsoft Excel Remote Code Execution Vulnerability

7.8CVSS7AI score0.00388EPSS

CVE•added 2020/05/21 11:15 p.m.•113 views

CVE-2020-0901

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.

9.8CVSS8.8AI score0.45859EPSS

CVE•added 2021/09/15 12:15 p.m.•113 views

CVE-2021-38660

Microsoft Office Graphics Remote Code Execution Vulnerability

7.8CVSS7.5AI score0.01861EPSS

CVE•added 2004/09/28 4:0 a.m.•112 views

CVE-2004-0200

Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM field length that is normalized to a large integer length before a memory copy oper...

9.3CVSS7.6AI score0.75514EPSS

CVE•added 2021/06/08 11:15 p.m.•111 views

CVE-2021-31939

Microsoft Excel Remote Code Execution Vulnerability

7.8CVSS7.7AI score0.04196EPSS

CVE•added 2020/01/14 11:15 p.m.•110 views

CVE-2020-0651

9.3CVSS7.9AI score0.33474EPSS

CVE•added 2020/08/17 7:15 p.m.•110 views

CVE-2020-1496

9.3CVSS8.7AI score0.15375EPSS

CVE•added 2017/11/15 3:29 a.m.•109 views

CVE-2017-11878

Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2016, Microsoft Office Compatibility Pack Service Pack 3, and Microsoft Excel Viewer 2007 Service Pack 3 allow an attacker to run ar...

9.3CVSS7.4AI score0.10505EPSS

CVE•added 2022/11/09 10:15 p.m.•109 views

CVE-2022-41106

Microsoft Excel Remote Code Execution Vulnerability

8.8CVSS8.2AI score0.03241EPSS

CVE•added 2020/09/11 5:15 p.m.•107 views

CVE-2020-1224

<p>An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the user’s computer or data.</p><p>To exploit the vulnerability, an attacker could craft a spec...

5.5CVSS5.9AI score0.21879EPSS

CVE•added 2021/04/13 8:15 p.m.•107 views

CVE-2021-28456

Microsoft Excel Information Disclosure Vulnerability

5.5CVSS5.9AI score0.04162EPSS

CVE•added 2019/10/10 2:15 p.m.•106 views

CVE-2019-1331

9.3CVSS8.8AI score0.37247EPSS

CVE•added 2020/08/17 7:15 p.m.•106 views

CVE-2020-1498

9.3CVSS8.7AI score0.15901EPSS

CVE•added 2019/12/10 10:15 p.m.•104 views

CVE-2019-1464

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosure Vulnerability'.

5.5CVSS5AI score0.13324EPSS

CVE•added 2020/08/17 7:15 p.m.•104 views

CVE-2020-1494

9.3CVSS8.7AI score0.15375EPSS

CVE•added 2020/12/10 12:15 a.m.•103 views

CVE-2020-17126

Microsoft Excel Information Disclosure Vulnerability

5.5CVSS5.6AI score0.00456EPSS

CVE•added 2022/11/09 10:15 p.m.•102 views

CVE-2022-41063

Microsoft Excel Remote Code Execution Vulnerability

7.8CVSS7.9AI score0.00435EPSS

CVE•added 2019/03/06 12:0 a.m.•100 views

CVE-2019-0669

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosure Vulnerability'.

6.5CVSS5.9AI score0.22366EPSS

CVE•added 2019/04/09 9:29 p.m.•100 views

CVE-2019-0828

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.

9.3CVSS7.8AI score0.25636EPSS

CVE•added 2020/09/11 5:15 p.m.•100 views

CVE-2020-1335

<p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with admin...

8.8CVSS7.8AI score0.07867EPSS

CVE•added 2020/09/11 5:15 p.m.•100 views

CVE-2020-1594

8.8CVSS7.8AI score0.07867EPSS

Total number of security vulnerabilities357