CVE-2006-2388

Summary: CVE-2006-2388 is a remote code execution vulnerability in Microsoft Office Excel (2000–2004) caused by a flaw when Excel rebuilds metadata after processing malformed cell comments. An attacker must lure a user into opening a crafted .XLS file, which could allow code execution with the cu...

CVE-2015-2415

CVE-2015-2415 affects Microsoft Office components (Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, and Office Compatibility Pack SP3). The root cause is memory corruption when parsing crafted Office documents, enabling remote code execution or a denial of service. The advisory ...

CVE-2025-21386

CVE-2025-21386 is documented as a Microsoft Excel remote code execution vulnerability associated with the February 2025 Office security updates. The MSRC advisory notes that updates address multiple Office Excel flaws (including 21386) and references security updates KB5002679 (Office Online Serv...

CVE-2025-30383

CVE-2025-30383 is a Microsoft Excel remote code execution vulnerability caused by a type confusion issue in Excel. The impact is local code execution with high confidentiality/integrity/availability concerns (CVSS 7.8, LOCAL, USER INTERACTION REQUIRED). Microsoft has released May 2025 security up...

CVE-2002-0617

CVE-2002-0617 affects Microsoft Excel 2000 and 2002 on Windows. The vulnerability allows remote attackers to execute code by creating a hyperlink on a drawing shape in a source workbook that points to a destination workbook containing an autoexecute macro, known as the Hyperlinked Excel Workbook ...

CVE-2007-0027

CVE-2007-0027 affects Microsoft Excel versions including Excel 2000 SP3, 2002 SP3, 2003 SP2, Excel 2004 for Mac, and Excel v.X for Mac. The flaw is a remote code execution due to memory corruption when parsing malformed IMDATA records in BIFF Excel files. An attacker could exploit this by enticin...

CVE-2011-0101

Microsoft Excel 2002 SP3 is affected by CVE-2011-0101, a RealTimeData Record Parsing vulnerability causing memory corruption due to an incorrect pointer calculation when handling double-byte stTopic fields. An attacker could deliver a crafted .xls file to trigger remote code execution or, per CVE...

CVE-2011-0103

CVE-2011-0103 covers a memory corruption vulnerability in Excel parsing logic that could allow remote code execution or a denial of service when opening specially crafted Excel files. Affected products include Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File ...

CVE-2011-0978

CVE-2011-0978 is a remote code execution vulnerability in Microsoft Excel and related Office components caused by a memory corruption/stack-based overflow while parsing the Axis Properties/ SxView records (vulnerable in Excel 2002 SP3, 2003 SP3, 2007 SP2, Office for Mac 2004, Excel Viewer SP2, an...

CVE-2011-1274

Vulnerability CVE-2011-1274 affects Microsoft Excel and related Office components across multiple platforms (Excel 2002/2003/2007; Office for Mac 2004/2008; Excel Viewer; Open XML Converter for Mac; Office Compatibility Pack). The issue arises when parsing certain Excel record structures, where i...

CVE-2013-3889

This CVE (CVE-2013-3889) corresponds to a memory corruption vulnerability in Microsoft Excel and related Office components. The affected products include Excel 2007 SP3, 2010 SP1/SP2, 2013 and RT, Office 2007 SP3, 2010 SP1/SP2, 2013/RT, Office for Mac 2011, Excel Viewer, Office Compatibility Pack...

CVE-2005-4131

CVE-2005-4131 affects Microsoft Excel 2000, 2002 and 2003 (Office 2000 SP3 and related packages). The vulnerability stems from parsing a malformed named range/range data in Excel files, which can cause memory corruption in a call to msvcrt.memmove. An attacker could leverage this via a specially ...

CVE-2007-0030

CVE-2007-0030 is the Excel Malformed Column Record Vulnerability. A memory corruption flaw occurs when parsing the BIFF8 Column field, allowing a remote attacker to execute arbitrary code by convincing a user to open a crafted Excel file. Affected products include Microsoft Excel 2000 SP3, 2002 S...

CVE-2007-0031

CVE-2007-0031 affects Microsoft Excel: heap-based buffer overflow in BIFF8 PALETTE records can allow a user-assisted remote attacker to execute arbitrary code. Vulnerable products include Excel 2000 SP3, 2002 SP3, 2003 SP2, and Mac versions (2004 for Mac, v.X for Mac). The flaw is triggered by op...

CVE-2010-3237

CVE-2010-3237 is a vulnerability in Microsoft Excel (affecting Excel 2002 SP3 and Office for Mac 2004) where parsing of the Merge Cell record can be exploited to execute arbitrary code. The root cause is improper handling/validation of Merge Cell Records in Excel file formats, enabling remote cod...

CVE-2011-0104

CVE-2011-0104 affects Microsoft Excel 2002 SP3, Excel 2003 SP3, Office 2004/2008 for Mac, and Open XML File Format Converter for Mac. A crafted HLink record in an Excel file can trigger memory corruption, allowing remote code execution or causing a denial of service. Exploitation details or in‑th...

CVE-2025-30376

CVE-2025-30376 affects Microsoft Excel (part of Microsoft Office). Root cause: heap-based buffer overflow in Excel. Impact: remote code execution locally. Remediation: security updates released by Microsoft (May 2025 updates; e.g., KB security updates) to fix the issue.

CVE-2007-0029

CVE-2007-0029 is the Excel Malformed String Vulnerability affecting Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, and Excel 2004/Mac (and Excel v.X for Mac). The issue allows user-assisted remote attackers to achieve arbitrary code execution by parsing a malformed string in Excel files. Microsoft...

CVE-2008-4266

CVE-2008-4266 (Excel Global Array Memory Corruption Vulnerability) is a remote code execution flaw in Microsoft Office Excel and related components (Excel 2000 SP3, 2002 SP3, 2003 SP3; Excel Viewer 2003 Gold/SP3; Office 2004/2008 for Mac; Open XML File Format Converter for Mac). The vulnerability...

CVE-2010-0264

The CVE-2010-0264 issue affects Microsoft Office Excel 2002 SP3, Excel for Mac (Office 2004/2008), and the Open XML File Format Converter for Mac, where parsing the Excel file format fails due to a DbOrParamQry record handling error. This memory-corruption vulnerability can allow remote code exec...

CVE-2010-1252

CVE-2010-1252 is a remote code execution vulnerability in Microsoft Office Excel, specifically affecting Excel 2002 SP3 and Office 2004 for Mac. The flaw stems from how Excel handles a crafted Excel file (String Variable Vulnerability) and could allow an attacker to execute arbitrary code with th...

CVE-2010-1253

CVE-2010-1253 is a remote-code-execution vulnerability in Microsoft Excel related to parsing DBQueryExt records (Excel ADO Object Vulnerability). The issue affects Excel on Windows platforms (Excel 2002 SP3; Excel 2007 SP1/SP2) and Excel on Mac (Office for Mac 2004/2008) plus Open XML File Format...

CVE-2010-2562

CVE-2010-2562 affects Microsoft Office Excel and components on Windows and Mac: Excel 2002 SP3/2003 SP3, Office 2004/2008 for Mac, and Open XML File Format Converter for Mac. The root cause is a parsing logic error in the Excel file format, leading to a memory corruption vulnerability that can al...

CVE-2011-1989

CVE-2011-1989 corresponds to a vulnerability in Microsoft Excel and related Office components where conditional expressions used for formatting could be parsed incorrectly. A crafted spreadsheet could lead to remote code execution. Affected products include Excel 2003 SP3, 2007 SP2, 2010 SP1, Off...

CVE-2011-3403

CVE-2011-3403 affects Microsoft Excel 2003 SP3 and Office 2004 for Mac, where improper handling of in-memory objects during parsing of crafted Excel files enables remote code execution. The vulnerability, dubbed “Record Memory Corruption Vulnerability,” is rated CVSSv2 base 9.3 (Network, single a...

CVE-2013-3890

Summary (CVE-2013-3890) : Microsoft Excel 2007 SP3, Excel Viewer, and Office Compatibility Pack SP3 are affected by memory corruption vulnerabilities that allow remote code execution via a crafted Office document. The issue is documented as two memory-corruption vulnerabilities enabling arbitrary...

CVE-2018-8163

The CVE-2018-8163 entry concerns Microsoft Excel/Office information disclosure due to memory contents being improperly disclosed. Affected products include Excel (various Office suites) with the root cause described as memory contents disclosure; impact is information disclosure (confidentiality)...

CVE-2025-29977

CVE-2025-29977 is a Microsoft Excel remote code execution vulnerability caused by a use-after-free in Excel. Exploitation can allow an attacker with local access to execute arbitrary code; user interaction is required per the CVSS, with high impact on confidentiality, integrity and availability. ...

CVE-2000-0277

Microsoft Excel 97/2000 are affected by the XLM Text Macro vulnerability, where Excel fails to warn when macros in external text files are executed, potentially allowing arbitrary commands via a macro virus. The issue occurs when references to external XLM macro files are present; Excel may not d...

CVE-2006-3059

Technical details for CVE-2006-3059 are not provided in the supplied documents; no affected product/version/impact is specified beyond a generic note. Monitor for updates.

CVE-2007-0215

CVE-2007-0215 is a stack-based buffer overflow in Microsoft Excel that occurs while processing a Named Graph record in .XLS BIFF files. The vulnerability affects Excel 2000 SP3, 2002 SP3, 2003 SP2, and Excel 2003 Viewer, and is exploitable via a crafted Excel file opened by a user, leading to mem...

CVE-2010-1246

CVE-2010-1246 is a confirmed vulnerability in Microsoft Excel 2002 SP3 where the RTD (Real Time Data) Future Record Type 0x813 parser mishandles a malformed topic string, causing a stack-based buffer overflow that could allow remote code execution. Public write-ups and advisories (e.g., SAINT adv...

CVE-2010-3234

The CVE-2010-3234 vulnerability is a Formula Substream Memory Corruption flaw in Microsoft Office Excel. It arises when Excel parses Formula Substream records, leading to a memory corruption condition that could allow a remote attacker to execute arbitrary code by convincing a user to open a spec...

CVE-2018-8331

CVE-2018-8331 is a remote code execution vulnerability in Microsoft Excel/Office. The root cause is Excel failing to properly handle objects in memory, allowing an attacker to run arbitrary code in the context of the current user if a specially crafted file is opened via email or a web page. The ...

CVE-2008-0111

CVE-2008-0111 : A remote code execution vulnerability in Microsoft Excel 2000 SP3 through 2007, Excel Viewer 2003, Compatibility Pack, and Office 2004 for Mac exists due to improper validation of data in BIFF8 data validation records when loading files. Exploitation requires a user to open a craf...

CVE-2009-3133

CVE-2009-3133 is the Excel Document Parsing Memory Corruption vulnerability affecting Microsoft Office Excel 2002 SP3, Office 2004 and 2008 for Mac, and the Open XML File Format Converter for Mac. It arises from memory corruption when loading Excel records (malformed objects), enabling remote cod...

CVE-2015-0063

CVE-2015-0063 is a remote-code-execution/memory-corruption vulnerability affecting Microsoft Office components (notably Excel 2007 SP3, Excel 2010 SP2, Excel 2013, Excel Viewer, and Office Compatibility Pack SP3) via specially crafted Office documents. The root cause is memory handling errors in ...

CVE-2024-49027

CVE-2024-49027 is an Excel vulnerability (Office Excel) leading to a high-impact local code execution scenario. The CVSS v3.1 vector shows an L2 access vector, low complexity, no privileges required, but user interaction is required; impact to confidentiality, integrity, and availability is repor...

CVE-2026-26133

CVE-2026-26133 involves an AI command injection vulnerability in Microsoft 365 Copilot that can lead to unauthorized disclosure of information over a network. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N) indicates a network-accessible issue with no privileges required but user intera...

CVE-2006-3875

CVE-2006-3875 : A remote code execution vulnerability in Microsoft Excel arises when parsing COLINFO records in XLS files. The COLINFO record parsing flaw can be exploited by a crafted Excel file to execute arbitrary code in the caller’s security context. Affected products include Microsoft Excel...

CVE-2008-3068

Microsoft Crypto API 5.131.2600.2180 through 6.0 (used in Outlook, Windows Live Mail, and Office 2007) performs CRL checks by using an arbitrary URL from a certificate embedded in an S/MIME email or a signed document via the Authority Information Access (AIA) extension. This allows remote attacke...

CVE-2009-3131

CVE-2009-3131 is the Excel Formula Parsing Memory Corruption vulnerability. The issue affects Microsoft Office Excel and related components across multiple platforms: Excel 2002 SP3, 2003 SP3, and 2007 SP1/SP2; Office 2004/2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer 2003 SP...

CVE-2010-0258

CVE-2010-0258 is a Microsoft Office Excel Sheet Object Type Confusion Vulnerability. It affects Excel 2002 SP3, 2003 SP3, 2007 SP1/SP2, and Mac variants (2004/2008 for Mac, Open XML Converter for Mac, Excel Viewer SP1/2, and Compatibility Pack SP1/SP2). Root cause: improper parsing of the Excel f...

CVE-2010-0260

Microsoft Excel MDXTUPLE/MDXSET heap overflow vulnerabilities (CVE-2010-0260, part of MS10-017) affect Excel 2007 SP1/SP2, Excel Viewer SP1/SP2, and the Office Compatibility Pack for Word/Excel/PowerPoint 2007. The issue arises while parsing the MDXTUPLE/MDXSET records in workbook globals, enabli...

CVE-2010-3239

CVE-2010-3239 is a memory corruption/remote code execution vulnerability in Microsoft Office Excel 2002 SP3 related to parsing of PtgExtraArray records. Exploitation involves opening a specially crafted Excel document to execute arbitrary code with the caller’s privileges. Microsoft’s MS10-080 se...

CVE-2016-7213

CVE-2016-7213 is tied to memory corruption in Microsoft Office components used by Excel across Windows and macOS platforms (Excel 2007/2010/2013/2016, Office for Mac 2011/2016, and Office Compatibility Pack). The root cause is improper handling of objects in memory, enabling remote attackers to e...

CVE-2007-1203

CVE-2007-1203 is a remote code execution vulnerability in Microsoft Excel where specially crafted set font values in Excel files can cause memory corruption. Affected products include Excel 2000 (SP3), 2002 (SP3), 2003 (SP2), 2003 Viewer, and 2004 for Mac, plus Excel 2007. The root cause involves...

CVE-2007-3890

CVE-2007-3890 is a remote code execution vulnerability in Microsoft Excel across Office 2000 SP3, Office XP SP3, Office 2003 SP2, and Office 2004 for Mac. The root cause is improper validation of the Workspace index value used in an Excel file’s workspace (rtWnDesk records), leading to memory cor...

CVE-2010-0823

CVE-2010-0823 is Microsoft Excel memory corruption remote code execution vulnerability described in MS10-038. It affects Excel 2002 SP3, 2003 SP3, 2007 SP1/SP2, and Office for Mac variants, Open XML Converter for Mac, Excel Viewer SP1/SP2, and Office Compatibility Pack 2007 File Formats SP1/SP2. ...

CVE-2010-3241

CVE-2010-3241 is a remote code execution vulnerability in Microsoft Excel’s parsing of binary file-format information. Affected products include Excel 2002 SP3, Office 2004/2008 for Mac, and Open XML File Format Converter for Mac. The root cause is an out-of-bounds memory write during parsing, en...