CVE-2010-3236

CVE-2010-3236 – Out Of Bounds Array Vulnerability arises from Excel’s handling of certain records, allowing remote code execution if a user opens a specially crafted Excel file. Affected products listed across connected docs include Microsoft Excel 2002 SP3, Excel 2003 SP3, Microsoft Office 2004 ...

CVE-2025-53735

CVE-2025-53735 is a Microsoft Excel remote code execution vulnerability caused by a use-after-free condition in Excel. The issue allows an attacker to run arbitrary code locally when a user opens a specially crafted Excel file. Microsoft has released security updates to address this vulnerability...

CVE-2025-54896

CVE-2025-54896 is a Use-After-Free vulnerability in Microsoft Office Excel that can enable local code execution. Affected component: Microsoft Excel (Office). Root cause: use-after-free condition in Excel leading to arbitrary code execution. Impact: remote code execution with high severity (per C...

CVE-2002-0616

CVE-2002-0616 refers to the Excel Inline Macros vulnerability in Microsoft Excel 2000/2002 for Windows. The Macro Security Model allows remote attackers to execute code by attaching an inline macro to an object within an Excel workbook. Affected products are Excel 2000 and 2002 on Windows; the un...

CVE-2006-0029

CVE-2006-0029 is a remote code execution vulnerability in Microsoft Excel affecting Excel 2000, 2002, and 2003 via a data file containing a malformed description that can corrupt memory. The Microsoft Security Bulletin MS06-012 provides fixes for this issue across affected Office/Excel versions (...

CVE-2008-0112

CVE-2008-0112 (Excel File Import Vulnerability) describes a remote code execution in Microsoft Excel 2000 SP3 and Office for Mac 2004/2008 triggered by importing a specially crafted SYLK (.slk) file. The underlying issue is improper validation/handling of SYLK data during import, allowing an atta...

CVE-2010-3235

CVE-2010-3235 (Formula Biff Record Vulnerability) is a remote-code-execution flaw in Excel’s handling of formula information. The Microsoft Excel Formula Biff Record parsing path can be corrupted by specially crafted Excel files, enabling arbitrary code execution when opened by a user. Affected p...

CVE-2011-1279

The CVE-2011-1279 issue affects Microsoft Excel 2002 SP3, 2003 SP3, Office 2004/2008 for Mac, and Open XML File Format Converter for Mac. Root cause is improper validation/parsing of record information in Excel files, leading to memory corruption that enables remote code execution or denial of se...

CVE-1999-0794

Issue summary : Microsoft Excel does not warn users when a macro is present inside a Symbolic Link (SYLK) format file. What is affected : Excel’s handling of SYLK files containing macros (no warning prompt to the user). Root cause / nature of vulnerability : Absence of user warning in the SYLK ma...

CVE-2006-1302

CVE-2006-1302 describes a memory corruption vulnerability in Microsoft Excel 2000–2003 (and related 2000–2004 variants) triggered by parsing certain fields in a SELECTION record within a .xls file, leading to possible arbitrary code execution when a user opens a crafted Excel file. The issue is a...

CVE-2010-3233

CVE-2010-3233 is part of a family of Excel vulnerabilities addressed by MS10-080. The public records describe multiple remote code execution flaws in Microsoft Office Excel/Office components (notably Lotus 1-2-3 and various Excel file formats) that could be triggered by opening specially crafted ...

CVE-2025-62563

CVE-2025-62563 is a Use-After-Free vulnerability in Microsoft Excel that allows local code execution. The issue affects Microsoft Excel/Office components and is described in multiple feeds (CVE entry, EUVD/NCSC/CIRCL sightings, and vendor advisories). The core flaw is use-after-free in Excel, ena...

CVE-2026-81957

CVE-2026-81957 is an out-of-bounds read vulnerability in Microsoft Office Excel that allows an unauthorized, local attacker to execute code on the system. The attack requires user interaction (e.g., opening a crafted file) but no prior privileges. Microsoft rates the CVSS 3.1 score at 7.8 (HIGH) ...

CVE-2007-3029

CVE-2007-3029 details (normal mode) : Affected software is Microsoft Excel 2002 SP3 and Excel 2003 SP2. The root cause is Excel’s insufficient data validation when processing the number of active worksheets (Worksheet Memory Corruption Vulnerability), which can lead to memory corruption. An attac...

CVE-2010-3238

CVE-2010-3238 is a Remote Code Execution in Microsoft Excel via a crafted Excel file that abuses a memory handling error when parsing binary file-format information (Negative Future Function). Affected products include Microsoft Excel 2002 SP3, Excel 2003 SP3, and Office 2004 for Mac. The vulnera...

CVE-2011-1278

CVE-2011-1278 affects Microsoft Excel 2002 SP3 and Office 2004 for Mac. The issue arises when parsing Excel record information, where input validation failures can lead to remote code execution or memory corruption via a crafted spreadsheet (Excel WriteAV vulnerability). The vulnerability is tied...

CVE-2026-55122

Technical details for CVE-2026-55122 are not publicly provided in the connected documents. The materials reference Excel Office vulnerabilities generally without specifics. Monitor for updates.

CVE-2026-55949

CVE-2026-55949 affects Microsoft Office Excel. The issue is described as a use of an uninitialized resource enabling local code execution. CVSS 3.1 base score 7.8 (HIGH) with local attack vector, low attack complexity, no privileges required but user interaction is required. Exploitation details ...

CVE-2025-60727

CVE-2025-60727 affects Microsoft Excel (Office) with an out-of-bounds read in Excel that enables local code execution. The vulnerability is documented across multiple feeds (MSRC/MSKB entries, CNVD, EUVD) and is associated with Excel-related exploitation in November 2025 advisories. The available...

CVE-2025-62553

CVE-2025-62553 affects Microsoft Excel (Office) with a use-after-free in Excel leading to local arbitrary code execution. The vulnerability, tracked across multiple advisories (CNVD/CNNVD/MSVCVE/NCSc) and confirmed by MSRC, is mitigated by December 2025 Office security updates (e.g., KB5002818/KB...

CVE-2026-54988

CVE-2026-54988 is an out-of-bounds read vulnerability affecting Microsoft Excel, enabling a local attacker to disclose information. The existing sources confirm the vulnerability in Microsoft Office Excel with local access requiring user interaction, but do not specify exact vulnerable versions, ...

CVE-2026-58618

CVE-2026-58618 : Heap-based buffer overflow in Microsoft Office Excel can allow a local attacker to execute code. Affects Excel components implicated in the heap overflow; CVSS 3.1 base score 7.8 (High). Exploitation is local and requires user interaction. Current connected docs reference Microso...

CVE-2026-81948

Microsoft Office Excel is affected by a heap-based buffer overflow that allows an unauthorized local attacker to execute arbitrary code. The vulnerability requires user interaction (e.g., opening a crafted file) but no prior privileges, and results in high impact to confidentiality, integrity, an...

CVE-2008-0114

CVE-2008-0114 describes a remote code execution vulnerability in Microsoft Excel’s handling of Style records. It affects Excel 2000 SP3 through 2003 SP2, Excel Viewer 2003, and Office for Mac 2004. The underlying issue is a memory handling error that occurs when loading specially crafted Excel fi...

CVE-2026-21261

CVE-2026-21261 describes an out-of-bounds read in Microsoft Excel that could allow a local attacker to disclose information. The issue affects Excel, with the root cause described as an out-of-bounds read in handling certain data, resulting in information disclosure (no impact on integrity or ava...

CVE-2026-26112

CVE-2026-26112 is a Microsoft Excel remote code execution vulnerability caused by an untrusted pointer dereference in Excel. The issue affects Microsoft Office Excel components and can lead to the execution of arbitrary code on a vulnerable system, with local exploit requirements and user interac...

CVE-2026-32199

CVE-2026-32199 affects Microsoft Excel (Office) with a use-after-free in Excel that enables local code execution by an attacker. The vulnerability is listed under Excel-related issues in multiple advisories and is addressed by security updates from Microsoft (e.g., KB5002855 for Office Online Ser...

CVE-2026-81950

CVE-2026-81950 is a double free vulnerability in Microsoft Office Excel that allows an unauthorized attacker to execute code locally. The CVSS 3.1 score is 7.8 (HIGH) , reflecting a local attack vector with low complexity, no privileges required, and user interaction required, resulting in high i...

CVE-1999-1055

CVE-1999-1055 (Microsoft Excel 97) vulnerabilities allow a malicious workbook to run arbitrary commands via the CALL worksheet function without warning. Affects Excel 97; root cause: worksheet functions can execute a malicious DLL. According to NVD, the issue has a base score of 7.5 (HIGH) with N...

CVE-2000-0637

Microsoft Excel 97 and 2000 are affected by a vulnerability in the Register.ID function that allows an attacker to trigger execution of arbitrary commands by specifying a malicious .dll; impact is arbitrary commands with local access. The provided documents do not include exploitation details or ...

CVE-2026-20946

CVE-2026-20946 is an Out-of-bounds read in Microsoft Office Excel that allows local code execution. Connected sources confirm Excel/Office impact and provide remediation via the January 2026 security updates (e.g., KB5002831 for Excel 2016; MSRC update guidance). Affected products include Excel 2...

CVE-2026-50675

CVE-2026-50675 describes a heap-based buffer overflow in Microsoft Office Excel that allows a local attacker to execute code on the affected system. The connected sources confirm the issue is tied to Excel, with a high-severity CVSS 3.1 score (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). No specific vul...

CVE-2026-81953

Microsoft Office Excel is affected by a stack-based buffer overflow that allows an unauthorized attacker to execute code locally. The CVSS 3.1 score is 7.8 (HIGH) with a local attack vector, low complexity, no privileges required, but user interaction required (the victim must open a crafted file...

CVE-2025-54904

CVE-2025-54904 is a use-after-free vulnerability in Microsoft Office Excel that allows an authenticated local attacker to execute code. The issue affects Excel/Office components and results in a local code execution impact with high severity. Microsoft has released a security update (KB5002776) t...

CVE-2026-32197

CVE-2026-32197 is a vulnerability described across multiple sources as a Use-after-free in Microsoft Office Excel that allows an attacker to locally execute code. The Windows/Office context is supported by the primary CVE entry and the MACOS Nessus notes referencing Excel exploits in the April 20...

CVE-2026-81959

A heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally when a user interacts with a crafted file. The CVSS 3.1 score is 7.8 (HIGH) , with a local attack vector, low complexity, no privileges required, and user interaction required, resulting...

CVE-2006-1309

CVE-2006-1309 is a Microsoft Excel vulnerability affecting Excel 2000–2004 where opening a crafted .xls file with a malformed LABEL record can trigger memory corruption and allow remote code execution. The underlying issue is memory corruption during processing of the LABEL record, potentially en...

CVE-2025-54901

CVE-2025-54901 affects Microsoft Excel (Office) with a buffer over-read that could allow a local attacker to disclose information. The CVE is linked to a Microsoft Excel information-disclosure vulnerability (CVE-2025-54901) with confirmed public references; the contribution notes indicate an info...

CVE-2025-62199

CVE-2025-62199 is a Microsoft Office remote code execution/use-after-free vulnerability. The CVE affects multiple Office components (notably Office and Excel) due to a memory-management flaw described as a use-after-free in Office, enabling a locally authenticated attacker to run arbitrary code. ...

CVE-2026-26108

CVE-2026-26108 is a Microsoft Excel heap-based buffer overflow vulnerability that allows an attacker to execute code locally. Multiple connected sources corroborate Excel as the affected component, with the underlying issue described as a heap-based overflow leading to remote code execution in Ex...

CVE-2026-50678

CVE-2026-50678: A heap-based buffer overflow in Microsoft Excel (Office) allows local information disclosure. CVSS v3.1 base score 6.6 (Medium): AV:L, AC:L, PR:N, UI:R, S:U, C:L, I:L, A:H. No exploit details are provided in the accompanying documents; remediation status/patch info not specified.

CVE-2025-54903

CVE-2025-54903 is a Microsoft Excel remote code execution vulnerability described as a use-after-free in Excel that could allow an attacker to execute code locally. The CVSS 3.1 metrics indicate a local, low-attack-complexity, no privileges required, with user interaction required, and high impac...

CVE-2025-62556

Microsoft Excel remote code execution vulnerability CVE-2025-62556 is triggered by an untrusted pointer dereference in Excel, enabling local code execution. The issue is tied to Microsoft Office Excel components; multiple Nessus/NCSC/EUVD listings corroborate the family of Office Excel vulnerabil...

CVE-2026-55031

CVE-2026-55031 is a Microsoft Office Excel vulnerability described as an out-of-bounds read that allows a locally authenticated attacker to execute code. The CVSS‑3.1 vector is Local, with Low attack complexity, and no privileges required, but user interaction is required and the impact is High f...

CVE-2026-68807

CVE-2026-68807 describes a heap-based buffer overflow in Microsoft Office Excel that allows a local attacker to execute code. Affected product: Microsoft Excel; vulnerability type: heap-based overflow in a component handling input data, enabling remote-like control of the process after local code...

CVE-2026-68812

CVE-2026-68812 concerns a heap-based buffer overflow in Microsoft Excel (Office) that can allow a locally executed arbitrary code execution when a user opens or processes a malicious file. The root cause is memory corruption inside Excel’s handling of data structures, leading to control of the pr...

CVE-2026-32189

CVE-2026-32189 affects Microsoft Excel. The vulnerability allows Remote Code Execution with a Local attack vector, requiring user interaction, and does not require privileges. The base CVSSv3.1 rating is 7.8 (HIGH) with impact on confidentiality, integrity, and availability. Root cause details ar...

CVE-2026-55036

CVE-2026-55036 is a Microsoft Office Excel vulnerability described as a buffer over-read that allows an attacker to execute code locally. The CVSS 3.1 base score is 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, and no privileges required but user interaction is required. The descrip...

CVE-2026-55137

CVE-2026-55137 in Microsoft Excel is a heap-based buffer overflow in Microsoft Office Excel that allows an unauthorized, locally executed code when a user opens a malicious file or link. The CVSS 3.1 vector (L, L, N, R, U, C/H/I/H/A/H) indicates a HIGH-severity, local attack requiring user intera...

CVE-2026-55898

CVE-2026-55898 concerns an Out-of-bounds read in Microsoft Office Excel , enabling an unauthorized local attacker to disclose information. The available documents identify Excel as the affected product and describe the root cause as an out-of-bounds read that leads to information disclosure local...