CVE-2000-0597

The CVE-2000-0597 entry concerns Microsoft Office 2000 (Excel and PowerPoint) and PowerPoint 97. The vulnerability arises because these products are marked as safe for scripting, enabling a remote attacker to coax Internet Explorer or some email clients to save files to arbitrary locations via th...

CVE-2001-0718

The CVE-2001-0718 issue affects Microsoft Excel and PowerPoint (across Windows and Macintosh releases up to 2002). Affected components are the macro handling/data stream processing; attackers can bypass macro restrictions by modifying the document data stream, enabling arbitrary code execution wh...

CVE-2002-1143

Affected software: Microsoft Word and Microsoft Excel (Office suite). Vulnerability: information disclosure via field codes in Word (INCLUDETEXT) and external updates in Excel, allowing remote attackers to insert and exfiltrate local data when a document is returned to the attacker. Root cause: m...

CVE-2006-1304

Microsoft Excel 2000–2003 contains a remote code execution vulnerability in the COLINFO record processing that can be triggered by a specially crafted .xls file. The underlying issue is a buffer overflow during a data filling operation, which could allow an attacker to execute arbitrary code with...

CVE-2010-3236

CVE-2010-3236 – Out Of Bounds Array Vulnerability arises from Excel’s handling of certain records, allowing remote code execution if a user opens a specially crafted Excel file. Affected products listed across connected docs include Microsoft Excel 2002 SP3, Excel 2003 SP3, Microsoft Office 2004 ...

CVE-2026-20957

CVE-2026-20957 is a Microsoft Excel/Office vulnerability caused by an integer underflow in Excel that could allow an attacker to execute code locally. The issue affects Microsoft Excel components across Office products (including Excel on Office Online Server and Excel 2016) and is documented as ...

CVE-2026-40359

CVE-2026-40359 is a Microsoft Excel use-after-free remote code execution vulnerability. Description and NVD match: Excel component vulnerability allows an attacker to execute code locally due to a use-after-free condition. Exploitation status is not explicitly provided in the documents. Microsoft...

CVE-2026-68793

CVE-2026-68793 involves an out-of-bounds read in Microsoft Office Excel that enables an unauthorized attacker to execute code locally. Affected software: Microsoft Excel. Vulnerable component: Excel handling leading to a out-of-bounds read; root cause stated as such. Impact: local code execution ...

CVE-2002-0615

CVE-2002-0615 affects Windows Media Player 7.1 (and related Media Player versions) where the Windows Media Active Playlist stores data in a well-known local file path, enabling HTML script execution in the Local Computer zone. Connected documentation also references MS02-032 (patch 320920) that f...

CVE-2002-0616

CVE-2002-0616 refers to the Excel Inline Macros vulnerability in Microsoft Excel 2000/2002 for Windows. The Macro Security Model allows remote attackers to execute code by attaching an inline macro to an object within an Excel workbook. Affected products are Excel 2000 and 2002 on Windows; the un...

CVE-2006-0028

CVE-2006-0028 is a Microsoft Excel remote code execution vulnerability tied to malformed BIFF parsing format files that can corrupt memory and allow arbitrary code execution. Affected products include Excel 2000, 2002, and 2003 (and Office 2000 SP3 and related packages). Exploitation requires a u...

CVE-2006-1308

CVE-2006-1308 is a remote code execution vulnerability in Microsoft Excel (2000–2004) caused by processing a malformed FNGROUPCOUNT value in an Excel file. The issue can be triggered when opening a specially crafted .xls, potentially allowing an attacker to execute arbitrary code in the security ...

CVE-2008-0112

CVE-2008-0112 (Excel File Import Vulnerability) describes a remote code execution in Microsoft Excel 2000 SP3 and Office for Mac 2004/2008 triggered by importing a specially crafted SYLK (.slk) file. The underlying issue is improper validation/handling of SYLK data during import, allowing an atta...

CVE-2026-48580

CVE-2026-48580 affects Microsoft Office Excel. The vulnerability is an untrusted pointer dereference in Excel that can allow an attacker to disclose information locally. Based on linked sources, this is a local vulnerability with medium severity (CVSS 3.1: 5.5) and requires user interaction; expl...

CVE-2026-68815

CVE-2026-68815 (Microsoft Excel) involves a heap-based buffer overflow in Excel that allows local code execution by an unauthorized attacker; the exploitation requires user interaction and has a high impact on confidentiality, integrity, and availability. Product: Microsoft Office Excel (Windows)...

CVE-2010-3235

CVE-2010-3235 (Formula Biff Record Vulnerability) is a remote-code-execution flaw in Excel’s handling of formula information. The Microsoft Excel Formula Biff Record parsing path can be corrupted by specially crafted Excel files, enabling arbitrary code execution when opened by a user. Affected p...

CVE-2011-1279

The CVE-2011-1279 issue affects Microsoft Excel 2002 SP3, 2003 SP3, Office 2004/2008 for Mac, and Open XML File Format Converter for Mac. Root cause is improper validation/parsing of record information in Excel files, leading to memory corruption that enables remote code execution or denial of se...

CVE-2016-3361

CVE-2016-3361 is a memory corruption vulnerability in Microsoft Office Excel 2010 SP2. A crafted document can cause remote code execution by improperly handling objects in memory, enabling an attacker to run arbitrary code in the context of the current user. Remediation is available via the Micro...

CVE-2025-53737

CVE-2025-53737 is a Microsoft Excel remote code execution vulnerability caused by a heap-based buffer overflow when opening specially crafted files. The connected sources (e.g., MSRC/Excel advisories and CNVD) confirm Excel as the affected product and cite heap-based overflow as the root cause le...

CVE-2026-20950

CVE-2026-20950 is a Microsoft Excel remote code execution vulnerability reported as a use-after-free in Excel affecting Office/Excel components. Exploitation would allow an attacker to execute code locally on a vulnerable system. Multiple connected sources confirm Excel is affected and that updat...

CVE-2026-40362

Summary: CVE-2026-40362 is a heap-based buffer overflow in Microsoft Office Excel that allows a local attacker to execute code. The CVSS 3.1 vector indicates LOCAL attack, no privileges required, user interaction required, with a High impact on confidentiality, integrity, and availability (base s...

CVE-2006-0029

CVE-2006-0029 is a remote code execution vulnerability in Microsoft Excel affecting Excel 2000, 2002, and 2003 via a data file containing a malformed description that can corrupt memory. The Microsoft Security Bulletin MS06-012 provides fixes for this issue across affected Office/Excel versions (...

CVE-2006-1301

CVE-2006-1301 affects Microsoft Excel 2000–2004 via a crafted SELECTION record that triggers memory corruption, allowing user-assisted arbitrary code execution. Root cause: insufficient validation when parsing SELECTION records, leading to memory corruption. Affected products: Excel 2000, 2002, 2...

CVE-2006-1302

CVE-2006-1302 describes a memory corruption vulnerability in Microsoft Excel 2000–2003 (and related 2000–2004 variants) triggered by parsing certain fields in a SELECTION record within a .xls file, leading to possible arbitrary code execution when a user opens a crafted Excel file. The issue is a...

CVE-2006-1306

CVE-2006-1306 is a Microsoft Excel remote code execution vulnerability in the Malformed OBJECT record. A crafted .xls file can cause an attacker-controlled function pointer to execute arbitrary code when opened, enabling code execution in the user’s context. The issue affects Office/Excel 2000–20...

CVE-2007-3490

Microsoft Excel 2003 SP2 contains a memory corruption vulnerability in the way it parses hostile XLS sheet names (as demonstrated by 2670.xls). A remote attacker could exploit this by persuading a user to open a crafted XLS file, potentially allowing arbitrary code execution in the security conte...

CVE-2026-44820

CVE-2026-44820 affects Microsoft Excel in Office. An integer underflow (wrap/wraparound) in Excel can allow a local attacker to execute code on the affected host. Exploitation requires local access and user interaction; no remote vector is indicated. The CVSS 3.1 base score is 7.8 (HIGH) with imp...

CVE-2026-44823

The CVE-2026-44823 entry concerns an integer underflow (wrap or wraparound) in Microsoft Office Excel that could allow an attacker to execute code locally. Affected product: Microsoft Excel within Microsoft Office. The vulnerability is described as enabling local code execution with attack vector...

CVE-2026-55037

CVE-2026-55037 affects Microsoft Office Excel. A heap-based buffer overflow in Excel allows an unauthenticated/unauthorized attacker to execute arbitrary code locally. The CVSSv3.1 vector indicates a local attack with low attack complexity, no privileges required, but user interaction is required...

CVE-1999-0794

Issue summary : Microsoft Excel does not warn users when a macro is present inside a Symbolic Link (SYLK) format file. What is affected : Excel’s handling of SYLK files containing macros (no warning prompt to the user). Root cause / nature of vulnerability : Absence of user warning in the SYLK ma...

CVE-2007-3029

CVE-2007-3029 details (normal mode) : Affected software is Microsoft Excel 2002 SP3 and Excel 2003 SP2. The root cause is Excel’s insufficient data validation when processing the number of active worksheets (Worksheet Memory Corruption Vulnerability), which can lead to memory corruption. An attac...

CVE-2010-3238

CVE-2010-3238 is a Remote Code Execution in Microsoft Excel via a crafted Excel file that abuses a memory handling error when parsing binary file-format information (Negative Future Function). Affected products include Microsoft Excel 2002 SP3, Excel 2003 SP3, and Office 2004 for Mac. The vulnera...

CVE-2025-49711

Microsoft Office Excel is affected by CVE-2025-49711 (Use-after-free in Excel) enabling local code execution. The vulnerability is documented across multiple sources, with the Microsoft Excel RCE identified as the root cause and trusted updates released. Affected products include Microsoft Excel ...

CVE-2026-32198

CVE-2026-32198 is a use-after-free vulnerability in Microsoft Office Excel that can allow a local attacker to execute arbitrary code on the affected system. The vulnerability is described in multiple sources as affecting Microsoft Excel, with the underlying issue being a use-after-free in Excel’s...

CVE-2026-68808

CVE-2026-68808 affects Microsoft Excel (Office) with an out-of-bounds read that allows a local attacker to disclose information. Root cause: out-of-bounds read in Excel. Impact: local information disclosure; CVSSv3.1 metrics indicate Local access, no privileges, user interaction required, Confide...

CVE-2026-70328

CVE-2026-70328 affects Microsoft Excel, with an out-of-bounds read that enables information disclosure over a network. The CVSSv3.1 base score is 6.5 (Medium); attack vector Network, attack complexity Low, privileges Required None, user interaction Required; confidentiality impact High. Connected...

CVE-2011-1278

CVE-2011-1278 affects Microsoft Excel 2002 SP3 and Office 2004 for Mac. The issue arises when parsing Excel record information, where input validation failures can lead to remote code execution or memory corruption via a crafted spreadsheet (Excel WriteAV vulnerability). The vulnerability is tied...

CVE-2025-59232

CVE-2025-59232 is an information-disclosure vulnerability in Microsoft Excel (part of Microsoft Office) caused by an out-of-bounds read that can disclose local data. The issue affects Excel components within Office; remediation is available via Microsoft Office security updates released October 2...

CVE-2025-59235

CVE-2025-59235 is an information-disclosure vulnerability in Microsoft Excel (Office) caused by an out-of-bounds read. Public sources in the connected docs consistently identify the affected component as Excel within the Microsoft Office suite and link the issue to Excel information-disclosure mi...

CVE-2010-3233

CVE-2010-3233 is part of a family of Excel vulnerabilities addressed by MS10-080. The public records describe multiple remote code execution flaws in Microsoft Office Excel/Office components (notably Lotus 1-2-3 and various Excel file formats) that could be triggered by opening specially crafted ...

CVE-2025-54896

CVE-2025-54896 is a Use-After-Free vulnerability in Microsoft Office Excel that can enable local code execution. Affected component: Microsoft Excel (Office). Root cause: use-after-free condition in Excel leading to arbitrary code execution. Impact: remote code execution with high severity (per C...

CVE-2025-54902

Microsoft Excel in Office is affected by a local, user-interaction-requiring code-execution vulnerability due to an out-of-bounds read. The CVE-2025-54902 issue is documented as a Microsoft Excel remote code execution vulnerability with an affected vector described in the MSRC entry and corrobora...

CVE-2025-62553

CVE-2025-62553 affects Microsoft Excel (Office) with a use-after-free in Excel leading to local arbitrary code execution. The vulnerability, tracked across multiple advisories (CNVD/CNNVD/MSVCVE/NCSc) and confirmed by MSRC, is mitigated by December 2025 Office security updates (e.g., KB5002818/KB...

CVE-2026-68800

CVE-2026-68800 is a heap-based overflow in Microsoft Office Excel that could allow a local attacker to execute code with the user’s privileges after exploiting via a crafted file opened or processed by Excel. Affected software is Microsoft Excel (Office). The advisory notes a local attack vector ...

CVE-1999-1055

CVE-1999-1055 (Microsoft Excel 97) vulnerabilities allow a malicious workbook to run arbitrary commands via the CALL worksheet function without warning. Affects Excel 97; root cause: worksheet functions can execute a malicious DLL. According to NVD, the issue has a base score of 7.5 (HIGH) with N...

CVE-2008-0114

CVE-2008-0114 describes a remote code execution vulnerability in Microsoft Excel’s handling of Style records. It affects Excel 2000 SP3 through 2003 SP2, Excel Viewer 2003, and Office for Mac 2004. The underlying issue is a memory handling error that occurs when loading specially crafted Excel fi...

CVE-2026-68797

CVE-2026-68797 describes an out-of-bounds read in Microsoft Office Excel that enables a local attacker to disclose information. The sources consistently identify Excel as the affected product; no specific versions, modules, or root-cause details beyond the general memory read bound violation are ...

CVE-2025-53735

CVE-2025-53735 is a Microsoft Excel remote code execution vulnerability caused by a use-after-free condition in Excel. The issue allows an attacker to run arbitrary code locally when a user opens a specially crafted Excel file. Microsoft has released security updates to address this vulnerability...

CVE-2026-26107

CVE-2026-26107 is a Microsoft Excel remote code execution vulnerability described as a use-after-free issue in Excel/Office. Affected software is Microsoft Excel within the Office suite; the underlying cause is use-after-free in Excel, enabling an attacker to execute code locally. Exploitation is...

CVE-2026-68811

Microsoft Excel is affected by CVE-2026-68811 through a type-confusion vulnerability that allows local code execution when accessing a resource with incompatible type. The root cause is a type-confusion issue in a component used by Excel; the vulnerability enables an unauthorized attacker to exec...