CVE-2026-32198

CVE-2026-32198 is a use-after-free vulnerability in Microsoft Office Excel that can allow a local attacker to execute arbitrary code on the affected system. The vulnerability is described in multiple sources as affecting Microsoft Excel, with the underlying issue being a use-after-free in Excel’s...

CVE-2026-55053

CVE-2026-55053 – Microsoft Excel heap-based buffer overflow in Microsoft Office Excel enables a local attacker to execute arbitrary code. The issue is described as a heap-based overflow affecting Excel, with the CVSS v3.1 vector indicating local attack, low attack complexity, and user interaction...

CVE-2026-55054

CVE-2026-55054 is an information-disclosure vulnerability in Microsoft Office Excel caused by an out-of-bounds read. The issue affects Excel and can leak data over a network; exploitation requires user interaction (per CVSS metrics: Network vector, Low attack complexity, No privileges, User inter...

CVE-2007-1239

Microsoft Excel 2003 contains a vulnerability in parsing .XLS files; a file with corrupted XML format or corrupted XLS format triggers a NULL pointer dereference, allowing remote attackers to cause a denial-of-service (application crash). The affected component is Excel’s workbook parsing for XLS...

CVE-2009-3132

CVE-2009-3132 is the Excel Index Parsing Vulnerability: a remote-code-execution flaw in Microsoft Office Excel where pointer corruption occurs while parsing Excel formulas/indices in affected Office Excel versions (Excel 2002 SP3, 2003 SP3, 2007 SP1/SP2, plus Mac variants and viewers). A crafted ...

CVE-2010-0262

CVE-2010-0262 describes a remote code execution vulnerability in Microsoft Office Excel stemming from an uninitialized memory access in the FNGROUPNAME record during parsing of Excel files. The issue could let an attacker execute arbitrary code with the privileges of the user who opens a crafted ...

CVE-2026-55138

CVE-2026-55138 is an information disclosure vulnerability affecting Microsoft Excel (Office). The issue is caused by an untrusted pointer dereference in Excel, allowing a local attacker to disclose information on the affected system. CVSS shows a Local attack vector, user interaction required, wi...

CVE-2026-68812

CVE-2026-68812 concerns a heap-based buffer overflow in Microsoft Excel (Office) that can allow a locally executed arbitrary code execution when a user opens or processes a malicious file. The root cause is memory corruption inside Excel’s handling of data structures, leading to control of the pr...

CVE-2007-0027

CVE-2007-0027 affects Microsoft Excel versions including Excel 2000 SP3, 2002 SP3, 2003 SP2, Excel 2004 for Mac, and Excel v.X for Mac. The flaw is a remote code execution due to memory corruption when parsing malformed IMDATA records in BIFF Excel files. An attacker could exploit this by enticin...

CVE-2007-0031

CVE-2007-0031 affects Microsoft Excel: heap-based buffer overflow in BIFF8 PALETTE records can allow a user-assisted remote attacker to execute arbitrary code. Vulnerable products include Excel 2000 SP3, 2002 SP3, 2003 SP2, and Mac versions (2004 for Mac, v.X for Mac). The flaw is triggered by op...

CVE-2010-1250

CVE-2010-1250 is a remote code execution vulnerability in Microsoft Office Excel, caused by a heap overflow when parsing malformed EDG (0x88) and Publisher (0x89) records. Affects Excel 2002 SP3, Excel for Mac (2004, 2008), and Open XML File Format Converter for Mac. Microsoft MS10-038 addresses ...

CVE-2011-0977

CVE-2011-0977 is a use-after-free in Microsoft Office’s handling of graphic objects within Office drawing data, enabling remote code execution. Affected products include Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2004/2008 for Mac, and the Open XML File Format Converter for Mac. The ...

CVE-2011-1274

Vulnerability CVE-2011-1274 affects Microsoft Excel and related Office components across multiple platforms (Excel 2002/2003/2007; Office for Mac 2004/2008; Excel Viewer; Open XML Converter for Mac; Office Compatibility Pack). The issue arises when parsing certain Excel record structures, where i...

CVE-2011-1275

CVE-2011-1275 affects Microsoft Excel components across Windows/macOS environments (Excel 2002 SP3; Office 2004/2008/2011 for Mac; Open XML File Format Converter for Mac). The issue arises from improper validation of record information during Excel file parsing, causing a memory handling error th...

CVE-2012-0185

CVE-2012-0185 is a heap-based buffer overflow affecting Microsoft Excel 2007 SP2/SP3, Excel 2010 Gold/SP1, Excel Viewer, and Office Compatibility Pack SP2/SP3 . The vulnerability arises from inefficient/incorrect memory handling during opening of crafted spreadsheets , specifically related to the...

CVE-2013-3889

This CVE (CVE-2013-3889) corresponds to a memory corruption vulnerability in Microsoft Excel and related Office components. The affected products include Excel 2007 SP3, 2010 SP1/SP2, 2013 and RT, Office 2007 SP3, 2010 SP1/SP2, 2013/RT, Office for Mac 2011, Excel Viewer, Office Compatibility Pack...

CVE-2015-0097

CVE-2015-0097 is an Office Local Zone Remote Code Execution vulnerability affecting Microsoft Office 2007 SP3 and Office 2010 SP2 (Word/Excel/PowerPoint). The root cause is improper handling of crafted Office documents that are processed in the HTML context of the local machine zone, allowing an ...

CVE-2026-40362

Summary: CVE-2026-40362 is a heap-based buffer overflow in Microsoft Office Excel that allows a local attacker to execute code. The CVSS 3.1 vector indicates LOCAL attack, no privileges required, user interaction required, with a High impact on confidentiality, integrity, and availability (base s...

CVE-2026-44822

CVE-2026-44822 describes an out-of-bounds read in Microsoft Office Excel that can allow an unauthenticated attacker to disclose information over the network. Affected product: Microsoft Excel within Office. Underlying cause is an out-of-bounds read; the CVSS 3.1 base score is 8.2 (High) with netw...

CVE-2002-0152

The CVE-2002-0152 entry concerns a buffer overflow in Macintosh builds of several Microsoft applications. The vulnerability is triggered by the file:// directive when a large number of slashes (/) is supplied, allowing remote attackers to crash the affected applications or potentially execute arb...

CVE-2006-3059

A remote code execution vulnerability exists in Microsoft Excel (versions 2000 through 2004) due to the processing of a malformed file . An attacker could exploit this by constructing a specially crafted Excel document that corrupts system memory when opened by a user. Successful exploitation cou...

CVE-2010-3230

The CVE-2010-3230 entry relates to an integer overflow in Microsoft Excel 2002 SP3 while parsing crafted record information, enabling remote code execution via a specially crafted Excel file. Affected software in the linked advisories includes Excel 2002 SP3 and related Excel formats across Offic...

CVE-2016-7228

CVE-2016-7228 affects Microsoft Office family (Excel 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, 2016; Office for Mac 2011/2016; Office Compatibility Pack SP3). Description: memory corruption in Office components allows remote code execution when a user opens a crafted Office document. Impact per ...

CVE-2025-53737

CVE-2025-53737 is a Microsoft Excel remote code execution vulnerability caused by a heap-based buffer overflow when opening specially crafted files. The connected sources (e.g., MSRC/Excel advisories and CNVD) confirm Excel as the affected product and cite heap-based overflow as the root cause le...

CVE-2025-59232

CVE-2025-59232 is an information-disclosure vulnerability in Microsoft Excel (part of Microsoft Office) caused by an out-of-bounds read that can disclose local data. The issue affects Excel components within Office; remediation is available via Microsoft Office security updates released October 2...

CVE-2026-50675

CVE-2026-50675 describes a heap-based buffer overflow in Microsoft Office Excel that allows a local attacker to execute code on the affected system. The connected sources confirm the issue is tied to Excel, with a high-severity CVSS 3.1 score (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). No specific vul...

CVE-2006-2388

Summary: CVE-2006-2388 is a remote code execution vulnerability in Microsoft Office Excel (2000–2004) caused by a flaw when Excel rebuilds metadata after processing malformed cell comments. An attacker must lure a user into opening a crafted .XLS file, which could allow code execution with the cu...

CVE-2026-20957

CVE-2026-20957 is a Microsoft Excel/Office vulnerability caused by an integer underflow in Excel that could allow an attacker to execute code locally. The issue affects Microsoft Excel components across Office products (including Excel on Office Online Server and Excel 2016) and is documented as ...

CVE-2006-0030

CVE-2006-0030 affects Microsoft Excel 2000, 2002, and 2003 via a memory corruption vulnerability in malformed graphics within Excel data files. An attacker could trigger remote code execution by having a user open a specially crafted Excel file containing a malformed graphic; impact is memory cor...

CVE-2008-0111

CVE-2008-0111 : A remote code execution vulnerability in Microsoft Excel 2000 SP3 through 2007, Excel Viewer 2003, Compatibility Pack, and Office 2004 for Mac exists due to improper validation of data in BIFF8 data validation records when loading files. Exploitation requires a user to open a craf...

CVE-2008-4266

CVE-2008-4266 (Excel Global Array Memory Corruption Vulnerability) is a remote code execution flaw in Microsoft Office Excel and related components (Excel 2000 SP3, 2002 SP3, 2003 SP3; Excel Viewer 2003 Gold/SP3; Office 2004/2008 for Mac; Open XML File Format Converter for Mac). The vulnerability...

CVE-2010-1247

CVE-2010-1247 is an Excel RealTimeData Record Heap Corruption vulnerability in Microsoft Office Excel (notably Excel 2002 SP3) triggered by a malformed RealTimeData/RTD record that enables remote code execution. Public documentation also notes related Excel memory corruption CVEs (e.g., 2010-1249...

CVE-2011-0101

A buffer overflow vulnerability exists in Microsoft Office Excel 2002 SP3 (and other versions) due to a memory handling error during RealTimeData record parsing . Specifically, when processing a stTopic field with double-byte characters, an incorrect pointer calculation occurs, leading to a memcp...

CVE-2011-0104

CVE-2011-0104 affects Microsoft Excel 2002 SP3, Excel 2003 SP3, Office 2004/2008 for Mac, and Open XML File Format Converter for Mac. A crafted HLink record in an Excel file can trigger memory corruption, allowing remote code execution or causing a denial of service. Exploitation details or in‑th...

CVE-2018-8162

CVE-2018-8162 is a remote code execution vulnerability in Microsoft Excel/Office where improper handling of in-memory objects can allow code execution. Affected products include Microsoft Excel (Office) across platforms; the vulnerability is triggered by memory handling flaws in Excel and require...

CVE-2026-55122

Technical details for CVE-2026-55122 are not publicly provided in the connected documents. The materials reference Excel Office vulnerabilities generally without specifics. Monitor for updates.

CVE-2007-0030

CVE-2007-0030 is the Excel Malformed Column Record Vulnerability. A memory corruption flaw occurs when parsing the BIFF8 Column field, allowing a remote attacker to execute arbitrary code by convincing a user to open a crafted Excel file. Affected products include Microsoft Excel 2000 SP3, 2002 S...

CVE-2010-1253

CVE-2010-1253 is a remote-code-execution vulnerability in Microsoft Excel related to parsing DBQueryExt records (Excel ADO Object Vulnerability). The issue affects Excel on Windows platforms (Excel 2002 SP3; Excel 2007 SP1/SP2) and Excel on Mac (Office for Mac 2004/2008) plus Open XML File Format...

CVE-2025-62564

CVE-2025-62564 affects Microsoft Excel within Office. The vulnerability is an out-of-bounds read in Excel that enables a local attacker to execute arbitrary code. CVSSv3.1 reflects a local attack with high impact (C/H/I/A = High) and no privileges required, with user interaction required. Microso...

CVE-2026-55136

CVE-2026-55136 affects Microsoft Excel (part of Microsoft Office). The vulnerability is caused by an untrusted pointer dereference in Excel, enabling a local attacker to execute code on the affected system. CVSS 3.1 base score 7.8 (HIGH) with local access, no privileges required, user interaction...

CVE-2026-55948

CVE-2026-55948 is a use-after-free vulnerability in Microsoft Office Excel that can allow local code execution. Affected: Excel (Office). Root cause: use-after-free in the Excel component. Impact: HIGH for confidentiality, integrity, and availability. CVSS v3.1 base score 7.8; attack vector LOCAL...

CVE-2006-3867

CVE-2006-3867 is a remote code execution vulnerability in Microsoft Excel triggered when Excel handles a crafted Lotus 1-2-3 file. The issue affects Excel on Windows (2000, XP, 2003) and Excel Viewer 2003, as well as Excel for Mac (2004) and Office v.X for Mac. The root cause is improper parsing ...

CVE-2007-0029

CVE-2007-0029 is the Excel Malformed String Vulnerability affecting Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, and Excel 2004/Mac (and Excel v.X for Mac). The issue allows user-assisted remote attackers to achieve arbitrary code execution by parsing a malformed string in Excel files. Microsoft...

CVE-2009-3131

CVE-2009-3131 is the Excel Formula Parsing Memory Corruption vulnerability. The issue affects Microsoft Office Excel and related components across multiple platforms: Excel 2002 SP3, 2003 SP3, and 2007 SP1/SP2; Office 2004/2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer 2003 SP...

CVE-2015-6177

CVE-2015-6177 is a remote code execution memory-corruption vulnerability in Microsoft Office components. A crafted Office document can trigger arbitrary code execution in Excel 2007 SP3, Office Compatibility Pack SP3, or Excel Viewer by abusing how Office handles objects in memory during document...

CVE-2009-3133

CVE-2009-3133 is the Excel Document Parsing Memory Corruption vulnerability affecting Microsoft Office Excel 2002 SP3, Office 2004 and 2008 for Mac, and the Open XML File Format Converter for Mac. It arises from memory corruption when loading Excel records (malformed objects), enabling remote cod...

CVE-2010-1246

CVE-2010-1246 is a confirmed vulnerability in Microsoft Excel 2002 SP3 where the RTD (Real Time Data) Future Record Type 0x813 parser mishandles a malformed topic string, causing a stack-based buffer overflow that could allow remote code execution. Public write-ups and advisories (e.g., SAINT adv...

CVE-2010-1252

CVE-2010-1252 is a remote code execution vulnerability in Microsoft Office Excel, specifically affecting Excel 2002 SP3 and Office 2004 for Mac. The flaw stems from how Excel handles a crafted Excel file (String Variable Vulnerability) and could allow an attacker to execute arbitrary code with th...

CVE-2011-0978

CVE-2011-0978 is a remote code execution vulnerability in Microsoft Excel and related Office components caused by a memory corruption/stack-based overflow while parsing the Axis Properties/ SxView records (vulnerable in Excel 2002 SP3, 2003 SP3, 2007 SP2, Office for Mac 2004, Excel Viewer SP2, an...

CVE-2018-8379

CVE-2018-8379 describes a remote code execution vulnerability in Microsoft Excel caused by improper handling of objects in memory. The CVE affects Excel, with related entries (CVE-2018-8375, CVE-2018-8382, etc.) covering Excel components in the broader Office ecosystem. The connected OpenVAS entr...