CVE-2022-41106

CVE-2022-41106 is a Microsoft Excel Remote Code Execution vulnerability. Public details in connected docs describe Excel/Office components as affected and indicate that security updates exist. Remediation in public docs includes security updates: KB5002253 for Excel 2016 (and related Office insta...

CVE-2025-21387

CVE-2025-21387 is a Microsoft Excel remote code execution vulnerability tied to Office/Excel 2016. Public advisories and the Microsoft KB describe an Excel RCE issue that is fixed by the February 2025 Office 2016 security update KB5002684 (MSKB). The fix applies to MSI-based Office 2016 installat...

CVE-2026-68816

CVE-2026-68816 is a stack-based buffer overflow in Microsoft Excel that enables local code execution by an unauthenticated attacker. The affected product is Microsoft Office Excel; the root cause is a stack-based overflow in Excel’s handling that can be triggered locally. The CVSS 3.1 base score ...

CVE-2020-17126

CVE-2020-17126 is identified as a Microsoft Excel Information Disclosure Vulnerability. The primary entry (NVD/NIST) classifies it under an information disclosure issue with a CVSS v3.1 base score of 5.5 (local access, low privileges, high confidentiality impact; no integrity/availability impact ...

CVE-2022-41063

CVE-2022-41063 is a Microsoft Excel remote code execution vulnerability. The connected documents confirm Excel as the affected product and cite a remote code execution issue, with the NVD entry providing a CVSSv3.1 score of 7.8 (HIGH) and a Local attack vector with User Interaction required. The ...

CVE-2025-47165

CVE-2025-47165 is a Microsoft Excel/Office remote code execution vulnerability attributed to a use-after-free in Excel. Connected sources describe an attacker leveraging a crafted DOCM delivery to compel a user to execute code, enabling local RCE. The CVE is tracked in Microsoft’s June 2025 secur...

CVE-2016-0122

CVE-2016-0122 affects Microsoft Office Excel across multiple versions (2007 SP3, 2010 SP2, 2013 SP1/RT SP1, 2016) and Office components; the vulnerability is a memory corruption/out-of-bounds read in Excel that enables remote code execution when a specially crafted Office document is opened. An e...

CVE-2017-11878

CVE-2017-11878 affects multiple Microsoft Excel/Office components (Excel 2007 SP3, 2017-era Excel/Viewer and Office Compatibility Pack SP3). The vulnerability arises from improper handling of objects in memory, leading to memory corruption that can allow an attacker to execute arbitrary code in t...

CVE-2021-28456

CVE-2021-28456 is a Microsoft Excel information disclosure vulnerability. The CVE is linked to Excel components and is reported in multiple sources as part of a family of vulnerabilities affecting Excel and Office products (e.g., CVE-2021-28449, CVE-2021-28451, CVE-2021-28454). The connected docu...

CVE-2015-2555

The CVE-2015-2555 entry describes a use-after-free in Microsoft Excel (2010 SP2, 2013 SP1, 2013 RT SP1, 2016, plus Excel for Mac 2011/2016 and Excel Services on SharePoint Server 2010 SP2/2013 SP1) triggered by a crafted calculatedColumnFormula object in an Office document, allowing remote code e...

CVE-2019-0828

CVE-2019-0828 is a Microsoft Excel remote code execution vulnerability caused by improper handling of memory objects in Excel. The Red Hat advisory and openvas/nessus entries confirm Excel (Office) is affected; the issue can allow remote code execution with the current user’s privileges, potentia...

CVE-2025-27750

CVE-2025-27750 is a real vulnerability affecting Microsoft Excel within Microsoft Office. The connected sources confirm a use-after-free condition in Excel that allows an attacker to execute arbitrary code locally. The CVSSv3.1 vector (LOCAL, Privileges NONE, User Interaction REQUIRED) yields a b...

CVE-2026-68817

CVE-2026-68817 describes a stack-based buffer overflow in Microsoft Office Excel that allows an unauthorized attacker to execute code locally. Affected product is Microsoft Excel; root cause is a stack-based overflow in Excel's handling of input. The CVE entry notes a high-severity impact (base s...

CVE-2016-0012

CVE-2016-0012 affects Microsoft Office suite (2007–2016 and related components) and is described as a security feature/ASLR bypass vulnerability. Connected OpenVAS entries explicitly reference remote bypass vectors in Office components (PowerPoint, Visio, Word, Excel, VB runtime) and note exploit...

CVE-2019-1446

CVE-2019-1446 describes an information-disclosure vulnerability in Microsoft Excel/Office where memory contents may be exposed due to improper handling of memory objects. The issue is discussed in connected Nessus/OpenVAS entries tied to November 2019 Office/Excel security updates, indicating aff...

CVE-2020-1335

CVE-2020-1335 is a Microsoft Excel remote code execution vulnerability caused by improper handling of memory objects. An attacker could run arbitrary code in the user’s context, potentially taking full control if the user has admin rights. Exploitation requires the user to open a specially crafte...

CVE-2019-0669

CVE-2019-0669 is an information-disclosure vulnerability in Microsoft Excel where memory contents can be disclosed when a crafted document is opened. The issue arises from Excel failing to properly isolate or protect memory contents during document processing, enabling an attacker to obtain data ...

CVE-2019-1327

CVE-2019-1327 is a remote code execution vulnerability in Microsoft Excel caused by improper handling of objects in memory. The Red Hat records also list CVE-2019-1331 as related, sharing the same underlying issue. Public sources in the provided documents describe the issue but do not include con...

CVE-2020-1594

CVE-2020-1594 is a remote-code-execution vulnerability in Microsoft Excel caused by improper handling of in-memory objects. Exploitation requires a user to open a specially crafted Excel file; code could run with the current user’s privileges, and if that user has admin rights, full control of th...

CVE-2025-24081

CVE-2025-24081 is a Microsoft Excel/Office vulnerability described as a use-after-free in Excel that enables local arbitrary code execution. The CVSS v3.1 vector indicates a high-severity, local-execution flaw (AV: Local, AC: Low, PR: None, UI: Required, S: Unchanged, C/I/A: High). The vulnerabil...

CVE-2018-8577

CVE-2018-8577 affects Microsoft Excel (and related Office components). The vulnerability arises when Excel fails to properly handle objects in memory, enabling a remote code execution where an attacker could run arbitrary code in the context of the current user. CVSSv3 vector indicates a local at...

CVE-2015-2503

CVE-2015-2503 is an Office Elevation of Privilege vulnerability that can be triggered via a crafted web site loaded in Internet Explorer to bypass sandbox protections and gain privileges. The initial CVE entry lists Microsoft Office 2007–2016 products (Word, Excel, PowerPoint, Access, InfoPath, V...

CVE-2017-11877

CVE-2017-11877 describes a security feature bypass in Microsoft Excel where macro settings were not enforced on a document, potentially allowing macros to run when they should be blocked. Connected MS KB update notes show the issue affects Excel 2016 (and related Excel entry points) and can be mi...

CVE-2021-27057

CVE-2021-27057 is a Microsoft Office/Excel remote code execution vulnerability. Public sources describe it as a vulnerability in Microsoft Office/Excel components that can lead to remote code execution when handling certain Office/Excel content, with a local attack vector and user interaction req...

CVE-2024-43106

Microsoft Excel on macOS (version 16.83) is vulnerable to a library-injection issue that lets a malicious app inject a library and piggyback on Excel’s entitlements to perform actions with the app’s permissions. The root cause is the combination of Hardened Runtime with com.apple.security.cs.disa...

CVE-2024-49028

CVE-2024-49028 is a Microsoft Excel remote code execution vulnerability. Related sources confirm Excel components are affected and describe a need for security updates (e.g., November 2024 Excel security updates, KB5002653) to remediate. The issue is tied to the Office/Excel suite and is addresse...

CVE-2021-43256

CVE-2021-43256 is an Microsoft Excel remote code execution vulnerability. Connected documents confirm the flaw affects Microsoft Excel as part of Office product updates and reference CVE-2021-43256 in December 2021 security updates. The vulnerability is described as enabling remote code execution...

CVE-2026-68799

CVE-2026-68799 : A vulnerability in Microsoft Excel arises from the use of an uninitialized resource, enabling a local attacker to disclose information. Affected product is Microsoft Excel; the issue is a local, low-exploitation vector with user interaction required and a reported CVSSv3.1 base s...

CVE-2026-68805

CVE-2026-68805 affects Microsoft Excel (part of Microsoft Office) with a heap-based buffer overflow leading to remote code execution. The connected documents consistently describe it as a heap-based overflow in Excel that enables an attacker to run arbitrary code, with a CVSSv3.1 base score of 7....

CVE-2015-2520

CVE-2015-2520 affects Microsoft Office components including Excel 2007 SP3, Excel 2010 SP2, Excel for Mac 2011/2016, Office Compatibility Pack SP3, and Excel Viewer. The root cause is a memory corruption due to improper handling of objects in memory, leading to remote code execution when a crafte...

CVE-2021-24067

CVE-2021-24067 is Microsoft Excel Remote Code Execution Vulnerability. Publicly documented as affecting Excel; remediation cited via February 2021 security updates (KB4493196) for Excel 2016 and related Office components, and broader Office update bundles addressing this and related CVEs. Connect...

CVE-2021-27053

CVE-2021-27053 is a Microsoft Excel remote code execution vulnerability. Multiple connected sources describe it as affecting Microsoft Excel products with a remote code execution flaw that can allow an attacker to bypass authentication and execute arbitrary commands. The issue is discussed across...

CVE-2017-8510

CVE-2017-8510 describes a remote code execution vulnerability in Microsoft Office caused by improper handling of objects in memory. The CVE entry notes an Office remote code execution risk with a high impact (C/H/I/A) and a network attack vector, requiring user interaction. The description provid...

CVE-2020-1332

CVE-2020-1332 is a Microsoft Excel remote code execution vulnerability. It arises when Excel fails to correctly handle objects in memory, allowing an attacker to run arbitrary code in the context of the user. If the user has administrative rights, the attacker could take full control of the affec...

CVE-2026-65807

Microsoft Excel is affected by CVE-2026-65807 due to a type confusion in resource access, allowing remote code execution over a network. The vulnerability arises from incompatible type handling in a resource access path within Excel, impacting users of Microsoft Office Excel. The CVSS 3.1 base sc...

CVE-2026-68794

CVE-2026-68794 is a heap-based buffer overflow in Microsoft Office Excel that can allow an attacker to execute code locally on affected systems. Available documents confirm the vulnerability affects Excel, with a heap-based overflow as the underlying issue; however, no specific affected versions,...

CVE-2017-0006

Technical details (affected products, root cause, and remediation) are not provided in the connected documents beyond the initial CVE summary; monitor for updates.

CVE-2017-0020

Technical details for CVE-2017-0020 are not publicly provided in the connected documents. No explicit affected products, root cause, or remediation are described here. Monitor for updates from official advisories and addenda.

CVE-2024-49030

CVE-2024-49030 is a Microsoft Excel Remote Code Execution vulnerability affecting Excel 2016 and related Office Excel components. Public advisories (CNVD/NCSC/MSRC) describe a vulnerability in Excel that could enable arbitrary code execution when a crafted file is opened, with a heap/remote-code-...

CVE-2015-0085

CVE-2015-0085 is a use-after-free vulnerability in Microsoft Office components (including Office 2007/2010/2013 suites and related SharePoint/Viewer components) that enables remote code execution via a crafted Office document. The issue affects a broad set of Office applications and SharePoint-re...

CVE-2016-3279

CVE-2016-3279 is a remote code execution vulnerability in multiple Microsoft Office components (e.g., Excel, Word, PowerPoint, Word Automation Services, Office Web Apps) that can be triggered by processing a crafted XLA file. Affected products include Office 2010 SP2, 2013 SP1/RT SP1, 2016, Word ...

CVE-2020-17130

CVE-2020-17130 is a Microsoft Excel Security Feature Bypass vulnerability affecting Excel 2016 (and possibly related C2R/office builds). The incident described in public CVE records indicates a security feature bypass in Excel; the provided documents do not specify the exact vulnerable component ...

CVE-2021-24069

CVE-2021-24069 is an Excel remote code execution vulnerability (Microsoft Excel/Office components). Public details in connected sources indicate a vulnerability class: remote code execution via Excel, with affected products spanning Microsoft Excel/Office versions referenced in Microsoft advisori...

CVE-2021-24070

CVE-2021-24070 is a Microsoft Excel remote code execution vulnerability. The connected documentation provides concrete details: affected product is Microsoft Excel (examples include Excel 2016/Office 2016 installations) and the vulnerability is described as allowing remote code execution. The Mic...

CVE-2026-68804

CVE-2026-68804 : A numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally. The vulnerability is documented across multiple sources (NVD, CVE listings) with the impact described as local code execution and a high base score (CVSS 3.1: AV=L, AC=L,...

CVE-2017-0027

CVE-2017-0027 affects Microsoft Office products including Excel 2007 SP3, Excel 2010 SP2, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Services on SharePoint Server 2013 SP1. Description: information disclosure from process memory when processing a crafted Office docume...

CVE-2018-0796

CVE-2018-0796 is a remote code execution vulnerability affecting Microsoft Excel in Office 2007–2016 due to how in-memory objects are handled. The core issue enables an attacker to run arbitrary code when a crafted file is opened, with a CVSS v3 base score of 8.8 (HIGH) and NETWORK attack vector,...

CVE-2020-17064

Technical details about CVE-2020-17064 are not publicly provided in the supplied documents. Current sources only reference an Excel remote code execution vulnerability and indicate it was included in November 2020 Office updates. Monitor for official advisories for impacted versions, root cause, ...

CVE-2008-0081

CVE-2008-0081 corresponds to the Macro Validation Vulnerability in Microsoft Excel and related Office components. A remote code execution flaw exists when opening specially crafted Excel files with macros, caused by improper validation of macro/memory handling, affecting Excel 2000 SP3 through 20...

CVE-2018-8627

CVE-2018-8627 (Microsoft Excel information disclosure) : An information-disclosure flaw in Excel when reading memory out of bounds due to an uninitialized variable. Affected products include Microsoft Office/Excel and related viewers. Exploitation requires opening a specially crafted file; succes...