CVE-2025-48812

CVE-2025-48812 affects Microsoft Excel (Office). An out-of-bounds read in Excel can allow a local attacker to disclose information. Public details in the provided documents indicate the issue impacts Excel 2016 and related Office components, with a local attack vector and high confidentiality imp...

CVE-2026-81947

Microsoft Office Excel is affected by a heap-based buffer overflow that allows an unauthorized attacker to execute code locally (CVSS v3.1 score 7.8 HIGH ). The attack requires user interaction (e.g., opening a malicious file) and no prior privileges. Impact spans confidentiality, integrity, and ...

CVE-2000-0277

Microsoft Excel 97/2000 are affected by the XLM Text Macro vulnerability, where Excel fails to warn when macros in external text files are executed, potentially allowing arbitrary commands via a macro virus. The issue occurs when references to external XLM macro files are present; Excel may not d...

CVE-2002-0617

CVE-2002-0617 affects Microsoft Excel 2000 and 2002 on Windows. The vulnerability allows remote attackers to execute code by creating a hyperlink on a drawing shape in a source workbook that points to a destination workbook containing an autoexecute macro, known as the Hyperlinked Excel Workbook ...

CVE-2010-0823

CVE-2010-0823 is Microsoft Excel memory corruption remote code execution vulnerability described in MS10-038. It affects Excel 2002 SP3, 2003 SP3, 2007 SP1/SP2, and Office for Mac variants, Open XML Converter for Mac, Excel Viewer SP1/SP2, and Office Compatibility Pack 2007 File Formats SP1/SP2. ...

CVE-2010-3234

The CVE-2010-3234 vulnerability is a Formula Substream Memory Corruption flaw in Microsoft Office Excel. It arises when Excel parses Formula Substream records, leading to a memory corruption condition that could allow a remote attacker to execute arbitrary code by convincing a user to open a spec...

CVE-2010-3242

CVE-2010-3242 is a Ghost Record Type Parsing vulnerability in Microsoft Excel components: Excel 2002 SP3, Office for Mac 2004 and 2008, and the Open XML File Format Converter for Mac. The issue arises from improper validation of record information during parsing Ghost records, leading to a memory...

CVE-2011-1276

CVE-2011-1276 is a remote-code-execution/denial-of-service vulnerability in Microsoft Excel and related Office components caused by a buffer overrun due to improper validation of record information. Affected products include Excel 2002 SP3, 2003 SP3, 2007 SP2; Office for Mac (2004/2008), Open XML...

CVE-2011-3403

CVE-2011-3403 affects Microsoft Excel 2003 SP3 and Office 2004 for Mac, where improper handling of in-memory objects during parsing of crafted Excel files enables remote code execution. The vulnerability, dubbed “Record Memory Corruption Vulnerability,” is rated CVSSv2 base 9.3 (Network, single a...

CVE-2025-30381

CVE-2025-30381 is an Excel/Microsoft Office vulnerability describing an out-of-bounds read in Microsoft Office Excel that enables a local attacker to execute arbitrary code on the vulnerable system. The advisory notes a local attack vector and code execution impact, with CVSS v3.1 metrics indicat...

CVE-2025-59235

CVE-2025-59235 is an information-disclosure vulnerability in Microsoft Excel (Office) caused by an out-of-bounds read. Public sources in the connected docs consistently identify the affected component as Excel within the Microsoft Office suite and link the issue to Excel information-disclosure mi...

CVE-2026-55947

CVE-2026-55947 is a Microsoft Excel vulnerability described as a heap-based buffer overflow in Microsoft Office Excel that enables local code execution. Affected product: Microsoft Office Excel (Office suite). Root cause: heap-based buffer overflow in Excel components, leading to arbitrary code e...

CVE-2026-81956

CVE-2026-81956 is an out-of-bounds read in Microsoft Office Excel that allows an unauthorized attacker to execute code locally . The attack requires user interaction (e.g., opening a malicious file) and needs no prior privileges. The assigned CVSS 3.1 score is 7.8 (HIGH) with high impact to confi...

CVE-2005-4131

CVE-2005-4131 affects Microsoft Excel 2000, 2002 and 2003 (Office 2000 SP3 and related packages). The vulnerability stems from parsing a malformed named range/range data in Excel files, which can cause memory corruption in a call to msvcrt.memmove. An attacker could leverage this via a specially ...

CVE-2007-3890

CVE-2007-3890 is a remote code execution vulnerability in Microsoft Excel across Office 2000 SP3, Office XP SP3, Office 2003 SP2, and Office 2004 for Mac. The root cause is improper validation of the Workspace index value used in an Excel file’s workspace (rtWnDesk records), leading to memory cor...

CVE-2010-0264

The CVE-2010-0264 issue affects Microsoft Office Excel 2002 SP3, Excel for Mac (Office 2004/2008), and the Open XML File Format Converter for Mac, where parsing the Excel file format fails due to a DbOrParamQry record handling error. This memory-corruption vulnerability can allow remote code exec...

CVE-2010-3239

CVE-2010-3239 is a memory corruption/remote code execution vulnerability in Microsoft Office Excel 2002 SP3 related to parsing of PtgExtraArray records. Exploitation involves opening a specially crafted Excel document to execute arbitrary code with the caller’s privileges. Microsoft’s MS10-080 se...

CVE-2011-0103

CVE-2011-0103 covers a memory corruption vulnerability in Excel parsing logic that could allow remote code execution or a denial of service when opening specially crafted Excel files. Affected products include Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File ...

CVE-2011-1987

CVE-2011-1987 covers an out-of-bounds/integer-signing issue in Microsoft Excel and related Office components (Excel 2003 SP3, 2007 SP2, 2010 SP1, Office for Mac, Open XML Converter, Excel Viewer, and Office Compatibility Pack). The root cause is an array indexing vulnerability triggered by a craf...

CVE-2026-26107

CVE-2026-26107 is a Microsoft Excel remote code execution vulnerability described as a use-after-free issue in Excel/Office. Affected software is Microsoft Excel within the Office suite; the underlying cause is use-after-free in Excel, enabling an attacker to execute code locally. Exploitation is...

CVE-2026-54988

CVE-2026-54988 is an out-of-bounds read vulnerability affecting Microsoft Excel, enabling a local attacker to disclose information. The existing sources confirm the vulnerability in Microsoft Office Excel with local access requiring user interaction, but do not specify exact vulnerable versions, ...

CVE-2026-68807

CVE-2026-68807 describes a heap-based buffer overflow in Microsoft Office Excel that allows a local attacker to execute code. Affected product: Microsoft Excel; vulnerability type: heap-based overflow in a component handling input data, enabling remote-like control of the process after local code...

CVE-2026-81960

A heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to achieve local code execution . The vulnerability requires user interaction (e.g., opening a malicious file) but no prior privileges. The assigned CVSS 3.1 score is 7.8 (HIGH) with full impact to confidential...

CVE-2007-0215

CVE-2007-0215 is a stack-based buffer overflow in Microsoft Excel that occurs while processing a Named Graph record in .XLS BIFF files. The vulnerability affects Excel 2000 SP3, 2002 SP3, 2003 SP2, and Excel 2003 Viewer, and is exploitable via a crafted Excel file opened by a user, leading to mem...

CVE-2007-1203

CVE-2007-1203 is a remote code execution vulnerability in Microsoft Excel where specially crafted set font values in Excel files can cause memory corruption. Affected products include Excel 2000 (SP3), 2002 (SP3), 2003 (SP2), 2003 Viewer, and 2004 for Mac, plus Excel 2007. The root cause involves...

CVE-2007-1214

The CVE-2007-1214 issue affects Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2003 Viewer, and 2004 for Mac. It is a memory corruption/remote code execution vulnerability in the handling of Excel BIFF8 AutoFilter records; a crafted XLS file can trigger the flaw. Attack vector involves a user-open...

CVE-2010-2562

CVE-2010-2562 affects Microsoft Office Excel and components on Windows and Mac: Excel 2002 SP3/2003 SP3, Office 2004/2008 for Mac, and Open XML File Format Converter for Mac. The root cause is a parsing logic error in the Excel file format, leading to a memory corruption vulnerability that can al...

CVE-2010-3237

CVE-2010-3237 is a vulnerability in Microsoft Excel (affecting Excel 2002 SP3 and Office for Mac 2004) where parsing of the Merge Cell record can be exploited to execute arbitrary code. The root cause is improper handling/validation of Merge Cell Records in Excel file formats, enabling remote cod...

CVE-2010-3241

CVE-2010-3241 is a remote code execution vulnerability in Microsoft Excel’s parsing of binary file-format information. Affected products include Excel 2002 SP3, Office 2004/2008 for Mac, and Open XML File Format Converter for Mac. The root cause is an out-of-bounds memory write during parsing, en...

CVE-2013-3890

Summary (CVE-2013-3890) : Microsoft Excel 2007 SP3, Excel Viewer, and Office Compatibility Pack SP3 are affected by memory corruption vulnerabilities that allow remote code execution via a crafted Office document. The issue is documented as two memory-corruption vulnerabilities enabling arbitrary...

CVE-2015-0063

CVE-2015-0063 is a remote-code-execution/memory-corruption vulnerability affecting Microsoft Office components (notably Excel 2007 SP3, Excel 2010 SP2, Excel 2013, Excel Viewer, and Office Compatibility Pack SP3) via specially crafted Office documents. The root cause is memory handling errors in ...

CVE-2010-0258

CVE-2010-0258 is a Microsoft Office Excel Sheet Object Type Confusion Vulnerability. It affects Excel 2002 SP3, 2003 SP3, 2007 SP1/SP2, and Mac variants (2004/2008 for Mac, Open XML Converter for Mac, Excel Viewer SP1/2, and Compatibility Pack SP1/SP2). Root cause: improper parsing of the Excel f...

CVE-2010-3231

CVE-2010-3231: Excel Record Parsing Memory Corruption Vulnerability. A remote-code-execution flaw in how Excel parses record information could allow code execution via a crafted Excel file. Affected: Excel on Mac (2004, 2008) and Open XML File Format Converter for Mac. Root cause: memory corrupti...

CVE-2026-32197

CVE-2026-32197 is a vulnerability described across multiple sources as a Use-after-free in Microsoft Office Excel that allows an attacker to locally execute code. The Windows/Office context is supported by the primary CVE entry and the MACOS Nessus notes referencing Excel exploits in the April 20...

CVE-2006-3875

CVE-2006-3875 : A remote code execution vulnerability in Microsoft Excel arises when parsing COLINFO records in XLS files. The COLINFO record parsing flaw can be exploited by a crafted Excel file to execute arbitrary code in the caller’s security context. Affected products include Microsoft Excel...

CVE-2007-1756

Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2003 Viewer, and Office Excel 2007 are affected by CVE-2007-1756 due to improper validation of version information, which can lead to memory corruption and remote code execution when a crafted Excel file is opened. The vulnerability is triggered by us...

CVE-2008-0117

CVE-2008-0117 refers to a remote code execution vulnerability in Microsoft Excel related to crafted conditional formatting values. Affected are Excel 2000 SP3, Excel 2002 SP2, and Office for Mac 2004/2008. Exploitation requires a user to open a specially crafted file, enabling arbitrary code exec...

CVE-2008-3068

Microsoft Crypto API 5.131.2600.2180 through 6.0 (used in Outlook, Windows Live Mail, and Office 2007) performs CRL checks by using an arbitrary URL from a certificate embedded in an S/MIME email or a signed document via the Authority Information Access (AIA) extension. This allows remote attacke...

CVE-2011-1989

CVE-2011-1989 corresponds to a vulnerability in Microsoft Excel and related Office components where conditional expressions used for formatting could be parsed incorrectly. A crafted spreadsheet could lead to remote code execution. Affected products include Excel 2003 SP3, 2007 SP2, 2010 SP1, Off...

CVE-2018-8331

CVE-2018-8331 is a remote code execution vulnerability in Microsoft Excel/Office. The root cause is Excel failing to properly handle objects in memory, allowing an attacker to run arbitrary code in the context of the current user if a specially crafted file is opened via email or a web page. The ...

CVE-2026-55898

CVE-2026-55898 concerns an Out-of-bounds read in Microsoft Office Excel , enabling an unauthorized local attacker to disclose information. The available documents identify Excel as the affected product and describe the root cause as an out-of-bounds read that leads to information disclosure local...

CVE-2026-58618

CVE-2026-58618 : Heap-based buffer overflow in Microsoft Office Excel can allow a local attacker to execute code. Affects Excel components implicated in the heap overflow; CVSS 3.1 base score 7.8 (High). Exploitation is local and requires user interaction. Current connected docs reference Microso...

CVE-2007-0028

CVE-2007-0028 affects multiple Excel variants: Excel 2000, 2002, 2003, Excel Viewer 2003, Office 2004 for Mac, and Office v.X for Mac. The vulnerability stems from improper handling of certain opcodes during Excel file parsing, which can corrupt memory and allow user‑assisted remote attackers to ...

CVE-2010-0260

Microsoft Excel MDXTUPLE/MDXSET heap overflow vulnerabilities (CVE-2010-0260, part of MS10-017) affect Excel 2007 SP1/SP2, Excel Viewer SP1/SP2, and the Office Compatibility Pack for Word/Excel/PowerPoint 2007. The issue arises while parsing the MDXTUPLE/MDXSET records in workbook globals, enabli...

CVE-2010-3240

CVE-2010-3240 describes a remote code execution vulnerability in Microsoft Office Excel and related components (Excel 2002 SP3, Excel 2007 SP2, Excel Viewer SP2, and Office Compatibility Pack SP2) caused by an error in parsing Real Time Data Array records. An attacker could exploit this by convin...

CVE-2025-54902

Microsoft Excel in Office is affected by a local, user-interaction-requiring code-execution vulnerability due to an out-of-bounds read. The CVE-2025-54902 issue is documented as a Microsoft Excel remote code execution vulnerability with an affected vector described in the MSRC entry and corrobora...

CVE-2010-0261

Microsoft Excel MDXSET Record Heap Overflow (CVE-2010-0261) is a remote-code-execution vulnerability affecting Excel 2007 SP1/SP2 and the Office Compatibility Pack for Word/Excel/PowerPoint 2007 File Formats SP1/SP2. The issue stems from parsing an MDXSET record that is broken into multiple recor...

CVE-2010-1251

CVE-2010-1251 corresponds to a remote code execution vulnerability in Microsoft Office Excel, specifically the Excel Record Stack Corruption vulnerability. Public sources in the connected set detail affected products including Excel 2002 SP3, Excel 2003/2002 line for Mac (Office 2004 for Mac) and...

CVE-2014-6360

CVE-2014-6360 affects Microsoft Office Excel 2007 SP3, Excel 2010 SP2, and the Office Compatibility Pack. The vulnerability arises from improper handling of objects in memory while parsing Office files, allowing a remote attacker to execute arbitrary code by convincing a user to open a specially ...

CVE-2018-8163

The CVE-2018-8163 entry concerns Microsoft Excel/Office information disclosure due to memory contents being improperly disclosed. Affected products include Excel (various Office suites) with the root cause described as memory contents disclosure; impact is information disclosure (confidentiality)...