CVE-2026-50408

CVE-2026-50408 is an information-disclosure vulnerability in Microsoft Office Excel caused by an out-of-bounds read that can disclose information locally to an attacker. The NVD/NCSC entries corroborate Excel as the affected product; Microsoft’s MSRC entry labels it as a Excel information-disclos...

CVE-2026-68814

CVE-2026-68814 concerns Microsoft Excel (Office) with an out-of-bounds read vulnerability that can allow a local attacker to execute code. The CVSS 3.1 vector (LOCAL, LOW attack complexity, no privileges required, user interaction required) and impact data indicate high confidentiality, integrity...

CVE-2016-3363

CVE-2016-3363 affects Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Viewer. The vulnerability is a memory-corruption flaw triggered by a crafted document, enabling remote code execution with the attacker gaining t...

CVE-2018-1027

Microsoft Excel/Office are affected by CVE-2018-1027, a remote code execution vulnerability caused by improper handling of in-memory objects. The issue affects Excel and Office suites, enabling potential code execution when loaded with crafted data. CVSS references show a high-severity impact (C ...

CVE-2010-1249

CVE-2010-1249 is a memory corruption vulnerability in Microsoft Office Excel related to processing malformed ExternalName (record type 0x23) in Excel files, enabling remote code execution when a user opens a crafted file. Affected products per the CVE entry and linked advisories include Excel 200...

CVE-2015-6094

Summary (CVE-2015-6094) A memory corruption vulnerability in Microsoft Office components (notably Excel) that could allow remote code execution when processing a specially crafted Office document. Affected products include Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for M...

CVE-2016-0035

CVE-2016-0035 affects Microsoft Office components (notably Excel across Windows and Mac variants, plus Office Compatibility Pack and Excel Viewer) and is described as a memory corruption vulnerability that allows remote code execution when processing specially crafted Office documents. The root c...

CVE-2018-8375

CVE-2018-8375 is a remote code execution vulnerability in Microsoft Excel family (Excel, Excel Viewer, Office) caused by improper handling of in-memory objects. The CVE affects Excel-related products and is characterized by a high-impact, possible remote code execution with local attack vector, r...

CVE-2026-55949

CVE-2026-55949 affects Microsoft Office Excel. The issue is described as a use of an uninitialized resource enabling local code execution. CVSS 3.1 base score 7.8 (HIGH) with local attack vector, low attack complexity, no privileges required but user interaction is required. Exploitation details ...

CVE-2018-0920

CVE-2018-0920 is part of a family of Microsoft Excel remote code execution vulnerabilities described across multiple CVEs (e.g., CVE-2018-1027, CVE-2018-1011, CVE-2018-1029). The connected documents indicate the issue affects Microsoft Excel (and related Office components) and arises when the app...

CVE-2026-68797

CVE-2026-68797 describes an out-of-bounds read in Microsoft Office Excel that enables a local attacker to disclose information. The sources consistently identify Excel as the affected product; no specific versions, modules, or root-cause details beyond the general memory read bound violation are ...

CVE-2018-8429

CVE-2018-8429 is an information disclosure vulnerability in Microsoft Excel and related components (Excel Viewer, Office). The underlying issue is that Excel may disclose memory contents. Affected products include Excel 2010 SP2, 2016 (KB4092460), Office compatibility pack, and related Excel/Offi...

CVE-2026-48580

CVE-2026-48580 affects Microsoft Office Excel. The vulnerability is an untrusted pointer dereference in Excel that can allow an attacker to disclose information locally. Based on linked sources, this is a local vulnerability with medium severity (CVSS 3.1: 5.5) and requires user interaction; expl...

CVE-2004-0846

Microsoft Excel is affected by CVE-2004-0846 due to a buffer overflow from improper validation of certain records/parameters in Excel files. The vulnerability affects Excel 2000, Excel 2002, Excel 2001 for Mac, and Excel v.X for Mac; Excel 2004 for Mac and Office 2003/XP SP3 are not affected. An ...

CVE-2012-1886

Summary: CVE-2012-1886 affects Microsoft Office Excel and related components. The vulnerability is triggered by a crafted spreadsheet that can cause memory corruption, enabling remote code execution or a denial of service. Affected products (as documented): Excel 2003 SP3; Excel 2007 SP2/SP3; Exc...

CVE-2015-2558

CVE-2015-2558 is a use-after-free memory corruption vulnerability in Microsoft Office components (e.g., Excel 2007 SP3, 2010 SP2, 2013 SP1/RT SP1, 2016; Office for Mac 2011/2016; Excel Services on SharePoint Server 2007 SP3/2010 SP2/2013 SP1) that allows remote code execution via a long fileVersi...

CVE-2016-7229

CVE-2016-7229 is a memory corruption vulnerability in Microsoft Office/Excel affecting multiple Office versions (including Excel 2007/2010/2013/2016 and Mac variants) that allows remote code execution via a crafted Office document. The issue stems from improper handling of objects in memory, enab...

CVE-2025-30375

CVE-2025-30375 affects Microsoft Excel (Office family). The vulnerability arises from a type confusion in Excel’s resource handling, enabling an attacker to achieve local code execution. Impact is described as remote/local execution with high severity; attack vector is local with user interaction...

CVE-2010-0263

CVE-2010-0263 concerns Microsoft Office Excel XLSX File Parsing Code Execution. The vulnerability arises from insufficient validation of ZIP headers during decompression of Open XML XLSX documents, enabling remote code execution via a crafted file that accesses uninitialized memory. Affected soft...

CVE-2011-1272

Summary (CVE-2011-1272) : This vulnerability affects Microsoft Excel and related components (Excel 2002 SP3, 2003 SP3, 2007 SP2; Office 2004/2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; Office Compatibility Pack SP2) and is caused by improper validation of record struct...

CVE-2015-6040

CVE-2015-6040 is a memory corruption vulnerability in Microsoft Office components (Excel 2007/2010, Excel for Mac 2011/2016, Office Compatibility Pack, Excel Viewer) that can be exploited remotely by a crafted Office document to execute arbitrary code. Root cause: improper handling of memory obje...

CVE-2016-3365

CVE-2016-3365 is a Microsoft Office memory corruption vulnerability affecting Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, Excel Viewer, Excel Services on SharePoint Server 2007 SP3, Excel Services on SharePoint Server 2010 SP2, Exc...

CVE-2016-7231

CVE-2016-7231 affects Microsoft Office components: Excel 2007 SP3, Excel for Mac 2011, Office Compatibility Pack SP3, and Excel Viewer. Root cause is memory corruption from improper handling of objects in memory, enabling remote code execution when processing a crafted Office document. Affected p...

CVE-2018-8148

CVE-2018-8148 is a remote code execution vulnerability in Microsoft Excel (Office) arising from improper handling of in-memory objects. The issue affects Microsoft Office/Excel and is part of a set including CVE-2018-8147 and CVE-2018-8162; the connected MAC/Office 2018 May 2018 update entry refe...

CVE-2024-49027

CVE-2024-49027 is an Excel vulnerability (Office Excel) leading to a high-impact local code execution scenario. The CVSS v3.1 vector shows an L2 access vector, low complexity, no privileges required, but user interaction is required; impact to confidentiality, integrity, and availability is repor...

CVE-2026-55025

CVE-2026-55025 affects Microsoft Office Excel. Root cause: a type confusion in Excel handling resources that allows an unauthenticated attacker to run arbitrary code locally. The vulnerability is classified as high impact (CVSSv3.1: 7.8, High) with local attack vector, no privileges required, but...

CVE-2026-55048

CVE-2026-55048 affects Microsoft Office Excel (and overall Office ecosystem in related advisories) with an integer overflow/wraparound in Excel leading to local code execution. The official CVE notes an unauthorized attacker can execute code locally; attack vector is LOCAL with user interaction r...

CVE-2026-55141

CVE-2026-55141 is a Microsoft Office Excel vulnerability described as a stack-based buffer overflow that allows a local attacker to execute code on the affected system. The CVE entry identifies Excel as the affected product and lists a high impact with a CVSS3.1 score of 7.8 (Local, High confiden...

CVE-2026-81951

CVE-2026-81951 is a heap-based buffer overflow in Microsoft Office Excel that allows an unauthorized attacker to execute code locally . The vulnerability is scored CVSS 3.1: 7.8 (HIGH) with a local attack vector , low complexity, no privileges required, and user interaction required (i.e., a vict...

CVE-1999-0717

Microsoft Excel 97 is affected by CVE-1999-0717, enabling a remote attacker to disable the virus warning mechanism. Connected documents confirm the product and impact but do not provide root-cause details, affected subcomponents/versions beyond Excel 97, exploitation status, or remediation steps.

CVE-2012-1887

CVE-2012-1887 is a use-after-free vulnerability in Microsoft Excel 2003 SP3, 2007 SP2/SP3, 2010 SP1, and Office for Mac 2008/2011, exploitable via a crafted spreadsheet to achieve remote code execution. The underlying issue is a use-after-free in handling an Excel SST Invalid Length condition. Af...

CVE-2016-0054

CVE-2016-0054 affects multiple Microsoft Office components (notably Excel across Windows and macOS, including Office viewers/SharePoint services). The underlying issue is memory corruption triggered by processing a crafted Office document, enabling remote code execution. Public references describ...

CVE-2016-7264

CVE-2016-7264 affects Microsoft Excel 2007 SP3, Office Compatibility Pack SP3, Excel Viewer, Excel for Mac 2011, and Excel 2016 for Mac. It enables information disclosure via an out-of-bounds memory read in a crafted document; impact is memory contents exposure. No exploitation details are provid...

CVE-2018-1029

Microsoft Excel remote code execution vulnerability exists due to improper handling of objects in memory, affecting Microsoft Excel, Excel Viewer, and Microsoft Office. The CVE-2018-1029 entry aligns with related CVEs (1027, 1011, 0920) and cites a memory-object handling flaw as the cause. The do...

CVE-2018-8382

CVE-2018-8382 is an information-disclosure vulnerability in Microsoft Excel family. Connected advisories attribute the root cause to a missing length verification during parsing of workbook streams, enabling a remote attacker to obtain sensitive memory contents. Affected products include Microsof...

CVE-2026-44823

The CVE-2026-44823 entry concerns an integer underflow (wrap or wraparound) in Microsoft Office Excel that could allow an attacker to execute code locally. Affected product: Microsoft Excel within Microsoft Office. The vulnerability is described as enabling local code execution with attack vector...

CVE-2026-55058

CVE-2026-55058 is an out-of-bounds read vulnerability in Microsoft Office Excel . The issue enables a local attacker to achieve remote code execution on a vulnerable system, as indicated by the CVSS vector: LOCAL attack, LOW attack complexity, with no privileges required and user interaction need...

CVE-2026-81388

CVE-2026-81388 is a stack-based buffer overflow in Microsoft Office Excel that allows an unauthorized attacker to execute code locally. The attack requires user interaction (e.g., opening a crafted file) and no prior privileges. The CVSS 3.1 score is 7.8 (HIGH) , with high impact to confidentiali...

CVE-2006-3014

CVE-2006-3014 affects Microsoft Excel where embedding a Shockwave Flash Player ActiveX Object inside an XLS can automatically execute, enabling user-assisted arbitrary JavaScript execution and redirection when the spreadsheet is opened. According to SUSE and CPAI advisories, the issue originates ...

CVE-2009-3128

CVE-2009-3128 describes a remote code execution vulnerability in Microsoft Office Excel via a malformed SxView record in Excel files. Affects Excel 2002 SP3, Excel 2003 SP3, and Excel Viewer 2003 SP3; exploitation leads to arbitrary code execution with the attacker gaining the user’s privileges. ...

CVE-2009-3134

CVE-2009-3134 is the Excel Field Sanitization Vulnerability. It affects Microsoft Office Excel components across Windows and Mac platforms listed in the entries, including Excel 2002 SP3, 2003 SP3, 2007 SP1/SP2, Office 2004/2008 for Mac, Open XML Converter for Mac, Excel Viewer SKUs, and the Offi...

CVE-2016-7267

CVE-2016-7267 affects Microsoft Excel across multiple versions: 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016. The root cause is misparsing of file formats, described as a security feature bypass vulnerability in Office that can lead to remote code execution when a user opens a crafted document. The ...

CVE-2018-8636

CVE-2018-8636 is a remote code execution vulnerability in Microsoft Excel (and related Office components) caused by improper handling of memory objects. Affected products include Office 365 ProPlus, Microsoft Office, and Microsoft Excel. The underlying issue is failure to properly manage in-memor...

CVE-2006-3431

CVE-2006-3431 describes a remote code execution vulnerability in Microsoft Excel related to the handling of the STYLE record in various Asian-language Excel versions. The flaw is a stack-based buffer overflow triggered when parsing a crafted spreadsheet, potentially allowing code execution if a u...

CVE-2010-3232

CVE-2010-3232 covers multiple Microsoft Office Excel-related parsing flaws: Excel record parsing vulnerabilities that allow remote code execution when opening specially crafted Excel files. The root cause is improper validation/handling of record information in the Excel file format, leading to m...

CVE-2015-2415

CVE-2015-2415 affects Microsoft Office components (Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, and Office Compatibility Pack SP3). The root cause is memory corruption when parsing crafted Office documents, enabling remote code execution or a denial of service. The advisory ...

CVE-2016-3284

CVE-2016-3284 affects Microsoft Excel components across numerous products (Excel 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, 2016; Excel for Mac 2011/2016; Office Compatibility Pack SP3; Excel Viewer). Root cause is memory corruption when processing crafted Office documents, enabling remote code e...

CVE-2026-20950

CVE-2026-20950 is a Microsoft Excel remote code execution vulnerability reported as a use-after-free in Excel affecting Office/Excel components. Exploitation would allow an attacker to execute code locally on a vulnerable system. Multiple connected sources confirm Excel is affected and that updat...

CVE-2026-44820

CVE-2026-44820 affects Microsoft Excel in Office. An integer underflow (wrap/wraparound) in Excel can allow a local attacker to execute code on the affected host. Exploitation requires local access and user interaction; no remote vector is indicated. The CVSS 3.1 base score is 7.8 (HIGH) with imp...

CVE-2026-55046

CVE-2026-55046 is an out-of-bounds read vulnerability in Microsoft Office Excel that allows an unauthorized attacker to disclose information locally. The CVE is documented in multiple feeds (NVD, MSRC, CIRCL sightings) with a CVSS v3.1 base score of 5.5 (Medium) and a local attack vector with use...