CVE-2026-68795

Microsoft Excel (Office) is affected by a stack-based buffer overflow (CVE-2026-68795) that could allow an attacker to execute code locally. The CVSS v3.1 score is 7.8 (HIGH) with LOCAL attack vector, requiring user interaction. The available documents do not specify a patched version or workarou...

CVE-2015-0085

CVE-2015-0085 is a use-after-free vulnerability in Microsoft Office components (including Office 2007/2010/2013 suites and related SharePoint/Viewer components) that enables remote code execution via a crafted Office document. The issue affects a broad set of Office applications and SharePoint-re...

CVE-2020-17130

CVE-2020-17130 is a Microsoft Excel Security Feature Bypass vulnerability affecting Excel 2016 (and possibly related C2R/office builds). The incident described in public CVE records indicates a security feature bypass in Excel; the provided documents do not specify the exact vulnerable component ...

CVE-2025-24075

Summary : CVE-2025-24075 is a stack-based buffer overflow in Microsoft Excel (Office) that allows local code execution. The vulnerability affects Excel components handling data/files and can lead to arbitrary code execution in the caller’s context when exploited locally with user interaction. Imp...

CVE-2008-0081

CVE-2008-0081 is a remote code execution vulnerability in Microsoft Excel caused by the application's failure to properly validate macro information and its use of an uninitialized pointer when processing an improperly placed rtAFDesc record in a specially crafted file. Affected products include ...

CVE-2017-0020

Technical details for CVE-2017-0020 are not publicly provided in the connected documents. No explicit affected products, root cause, or remediation are described here. Monitor for updates from official advisories and addenda.

CVE-2021-24070

CVE-2021-24070 is a Microsoft Excel remote code execution vulnerability. The connected documentation provides concrete details: affected product is Microsoft Excel (examples include Excel 2016/Office 2016 installations) and the vulnerability is described as allowing remote code execution. The Mic...

CVE-2011-0105

The Excel Data Initialization Vulnerability (CVE-2011-0105) affects Microsoft Excel 2002 SP3 , Office 2004 and 2008 for Mac , and the Open XML File Format Converter for Mac . The root cause is an uninitialized memory location used to obtain a certain length value, allowing remote attackers to tri...

CVE-2016-3233

CVE-2016-3233 concerns Microsoft Office memory corruption affecting Excel 2007 SP3, Excel 2010 SP2, and Office Compatibility Pack SP3. A crafted Office document can trigger a memory corruption that allows remote code execution. Exploitation requires a user to open the specially crafted file (user...

CVE-2016-3279

CVE-2016-3279 is a remote code execution vulnerability in multiple Microsoft Office components (e.g., Excel, Word, PowerPoint, Word Automation Services, Office Web Apps) that can be triggered by processing a crafted XLA file. Affected products include Office 2010 SP2, 2013 SP1/RT SP1, 2016, Word ...

CVE-2017-0027

CVE-2017-0027 affects Microsoft Office products including Excel 2007 SP3, Excel 2010 SP2, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Services on SharePoint Server 2013 SP1. Description: information disclosure from process memory when processing a crafted Office docume...

CVE-2018-8502

CVE-2018-8502 is an Excel remote code execution vulnerability in Microsoft Excel (and adjacent Office components) caused by improper handling of objects in Protected View. The issue allows arbitrary code execution in the context of the current user, with the attacker potentially gaining full cont...

CVE-2018-8627

An information disclosure vulnerability exists in Microsoft Excel products (including Office 365 ProPlus and Excel Viewer) when the software reads out-of-bound memory due to an uninitialized variable . An attacker who successfully exploits this vulnerability could view out-of-bound memory content...

CVE-2024-49030

CVE-2024-49030 is a Microsoft Excel Remote Code Execution vulnerability affecting Excel 2016 and related Office Excel components. Public advisories (CNVD/NCSC/MSRC) describe a vulnerability in Excel that could enable arbitrary code execution when a crafted file is opened, with a heap/remote-code-...

CVE-2026-42832

This CVE (CVE-2026-42832) concerns Microsoft Office and is rooted in improper access control that enables a local attacker to spoof. Affected software is Microsoft Office; the vulnerability is described as allowing local spoofing with high impact to confidentiality and integrity (per CVSS 3.1 met...

CVE-2026-44812

CVE-2026-44812 affects Windows graphics component Win32K GRFX, where an integer overflow/wraparound in GRFX can allow an unauthorized attacker to execute code locally. The CVSS v3.1 vector is AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H with a base score of 7.8 (HIGH). Exploitation details are not provide...

CVE-2026-81950

CVE-2026-81950 is a double free vulnerability in Microsoft Office Excel that allows an unauthorized attacker to execute code locally. The CVSS 3.1 score is 7.8 (HIGH) , reflecting a local attack vector with low complexity, no privileges required, and user interaction required, resulting in high i...

CVE-2016-3358

CVE-2016-3358 affects Microsoft Office and Excel components across Windows and Mac platforms (Excel 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, 2016; Office Online Server; Office Viewer; SharePoint Excel Services). The vulnerability is described as a memory corruption in Office applications that a...

CVE-2017-0052

The CVE affects Microsoft Office components: Office Compatibility Pack SP3, Excel 2007 SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3. It is a memory corruption vulnerability exploitable via a crafted document, potentially allowing remote code execution or denial of service. ...

CVE-2020-1497

CVE-2020-1497 is an information disclosure vulnerability in Microsoft Excel. The issue arises when Excel improperly discloses contents of memory due to how objects are handled in memory; an attacker could craft a document and convince a user to open it to exfiltrate memory contents. The core root...

CVE-2020-17065

CVE-2020-17065 is a Microsoft Excel remote code execution vulnerability. Based on connected documents, the issue is tied to Microsoft Office Excel components and is addressed in November 2020 security updates (Office product family including Excel 2010/2013 and related C2R deployments). Nessus/NV...

CVE-2021-27054

CVE-2021-27054 is a Microsoft Excel remote code execution vulnerability documenting RCE in Excel/Office components. Public sources in connected docs reference March 2021 security updates for Office/Excel products (C2R deployments for March 2021; macOS and Office 2010/2019 variants) as the fix con...

CVE-2026-68806

Microsoft Excel contains an out-of-bounds write vulnerability (CVE-2026-68806) that can allow an authenticated local attacker to execute code on the affected system. The CVE description specifies local code execution via an out-of-bounds write in Excel. The connected records confirm the issue is ...

CVE-2006-3877

PowerPoint Malformed Record Memory Corruption Vulnerability (CVE-2006-3877) affects multiple Office suites. A remote code execution flaw exists when PowerPoint opens a specially crafted file with malformed records, allowing an attacker to gain full control of the affected system if the user runs ...

CVE-2026-78518

CVE-2026-78518 is an out-of-bounds read vulnerability in Microsoft Office Excel that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (HIGH) , with a network attack vector, low complexity, no privileges required, but user interaction requi...

CVE-2010-0822

CVE-2010-0822 describes a stack-based overflow in Excel’s object (OBJ) record parser. The vulnerability permits remote code execution via a specially crafted Excel file and affects Excel 2002 SP3, Office 2004/2008 for Mac, and Open XML File Format Converter for Mac (per the initial entry). Public...

CVE-2015-2376

CVE-2015-2376 affects multiple Microsoft Office components (Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1/RT SP1, Office for Mac 2011, Excel Viewer 2007 SP3, Office Compatibility Pack SP3, and Excel Services on SharePoint Server 2007 SP3/2010 SP2/2013 SP1). The vulnerability is a memory corrupti...

CVE-2026-81949

CVE-2026-81949 is a local code execution vulnerability in Microsoft Office Excel caused by an integer overflow or wraparound in Excel. An unauthorized attacker who convinces a user to open a crafted file can execute arbitrary code on the target system. The CVSS v3.1 score is 7.8 (HIGH) , reflecti...

CVE-2025-29979

The CVE-2025-29979 entry concerns a heap-based buffer overflow in Microsoft Excel that enables local code execution. Affected software is Microsoft Excel (part of the Office suite); the root cause is a heap-based buffer overflow in Excel’s handling of certain inputs, which could allow an attacker...

CVE-2026-81953

Microsoft Office Excel is affected by a stack-based buffer overflow that allows an unauthorized attacker to execute code locally. The CVSS 3.1 score is 7.8 (HIGH) with a local attack vector, low complexity, no privileges required, but user interaction required (the victim must open a crafted file...

CVE-2017-8632

CVE-2017-8632 describes a remote code execution vulnerability in Microsoft Office products caused by improper handling of in-memory objects (memory corruption). Affected are Microsoft Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Web Apps 2013, Excel for Mac 2011, Excel 20...

CVE-2025-24082

CVE-2025-24082 is a Microsoft Excel remote code execution vulnerability described as a use-after-free in Excel that can allow a local attacker to run arbitrary code. The CVE is confirmed by Microsoft’s MSRC entry (Microsoft Excel Remote Code Execution Vulnerability) and is referenced alongside re...

CVE-2026-68808

CVE-2026-68808 affects Microsoft Excel (Office) with an out-of-bounds read that allows a local attacker to disclose information. Root cause: out-of-bounds read in Excel. Impact: local information disclosure; CVSSv3.1 metrics indicate Local access, no privileges, user interaction required, Confide...

CVE-2015-2377

CVE-2015-2377 affects Microsoft Office components (Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, and Office Compatibility Pack SP3) and is caused by memory corruption when parsing crafted Office documents, enabling remote code execution or a denial of service. Multiple connec...

CVE-2016-7265

CVE-2016-7265 affects Microsoft Office components (notably Excel 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, 2016, Office Compatibility Pack SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3/2010 SP2). The vulnerability is described as an information disclosure via an out-of-boun...

CVE-2017-0194

CVE-2017-0194 affects Microsoft Excel 2007 SP3, Excel 2010 SP2 and Office Compatibility Pack SP2. It is an Information Disclosure vulnerability where crafted Office documents can cause memory objects to disclose sensitive memory contents due to improper handling of memory. Root cause: improper ha...

CVE-2017-8501

CVE-2017-8501 is described across connected CNVD/OpenVAS entries as a memory corruption vulnerability in Microsoft Office components (notably Word/Excel/SharePoint) that can be triggered by specially crafted files to yield remote code execution or DoS under the current user. The root cause cited ...

CVE-2020-1504

CVE-2020-1504 is a remote code execution flaw in Microsoft Excel caused by improper handling of in-memory objects. The vulnerability allows arbitrary code execution in the caller’s context if a user opens a specially crafted Excel file. The NVD entry (CVSS:3.1 base score 8.8; impact high on confi...

CVE-2025-21394

CVE-2025-21394 is a Microsoft Excel remote code execution vulnerability affecting Excel/Office components. Exploitation requires a user to open a crafted file and can lead to total compromise per the published CVSS: Local access, user interaction required, high impact. Remediation provided via Fe...

CVE-2025-30379

CVE-2025-30379 is a Microsoft Excel/Office vulnerability described as a release of an invalid pointer or reference in Excel that allows an attacker to execute code locally. Public references (MSRC advisory and CVE records) corroborate Excel as the affected component and confirm a local code execu...

CVE-2026-85875

An out-of-bounds read vulnerability in Microsoft Office Excel allows an unauthorized local attacker to disclose information. The CVSS 3.1 score is 5.5 (Medium) , with a local attack vector, low complexity, no privileges required, and user interaction required. Impact is limited to confidentiality...

CVE-2020-17067

CVE-2020-17067 refers to a Microsoft Excel Security Feature Bypass vulnerability. Affected product: Microsoft Excel/Office components; root cause: security feature bypass in Excel. CVSSv3.1 base score 7.8 (HIGH) with LOCAL attack vector, LOW complexity, NONE privileges, user interaction REQUIRED;...

CVE-2026-45455

CVE-2026-45455 is an Excel information-disclosure vulnerability (out-of-bounds read) in Microsoft Office Excel. The issue allows an unauthorized attacker to disclose information over a network. Multiple connected documents confirm the affected component as Microsoft Excel (Office) and attribute t...

CVE-2026-68800

CVE-2026-68800 is a heap-based overflow in Microsoft Office Excel that could allow a local attacker to execute code with the user’s privileges after exploiting via a crafted file opened or processed by Excel. Affected software is Microsoft Excel (Office). The advisory notes a local attack vector ...

CVE-2010-0257

CVE-2010-0257 is a remote code execution vulnerability in Microsoft Excel 2002 SP3 and Excel XP related to memory corruption when processing EntExU2 records in a crafted Excel file. Exploitation could allow an attacker to take full control of the affected system by convincing a user to open a mal...

CVE-2010-0821

CVE-2010-0821 is identified in connected advisories as the Excel SXVIEW record parsing memory corruption vulnerability. It allows remote code execution if a user opens a specially crafted Excel file, due to improper parsing of SXVIEW structures. Exploitation requires user interaction (opening a c...

CVE-2018-8147

CVE-2018-8147 is a remote code execution vulnerability in Microsoft Excel (Office) tied to improper handling of in-memory objects. The issue could allow an attacker to run arbitrary code in the context of the current user, potentially taking control of the affected system, as described in multipl...

CVE-2026-68815

CVE-2026-68815 (Microsoft Excel) involves a heap-based buffer overflow in Excel that allows local code execution by an unauthorized attacker; the exploitation requires user interaction and has a high impact on confidentiality, integrity, and availability. Product: Microsoft Office Excel (Windows)...

CVE-2016-7266

CVE-2016-7266 affects multiple Microsoft Office/Excel variants (Windows: Excel 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, 2016; macOS: Excel 2016) and the Office Compatibility Pack, Excel Viewer, and Excel for Mac. The root cause is mishandling of a registry check when running embedded content, d...

CVE-2015-6038

CVE-2015-6038 affects Microsoft Office products including Excel 2007/2010/2013/2016 (Windows and Mac) and related components, as well as Excel Services on SharePoint Server and Office viewers. The vulnerability stems from memory corruption triggered by specially crafted Office documents, enabling...