CVE-2000-0637

Microsoft Excel 97 and 2000 are affected by a vulnerability in the Register.ID function that allows an attacker to trigger execution of arbitrary commands by specifying a malicious .dll; impact is arbitrary commands with local access. The provided documents do not include exploitation details or ...

CVE-2006-1309

CVE-2006-1309 is a Microsoft Excel vulnerability affecting Excel 2000–2004 where opening a crafted .xls file with a malformed LABEL record can trigger memory corruption and allow remote code execution. The underlying issue is memory corruption during processing of the LABEL record, potentially en...

CVE-2026-44822

CVE-2026-44822 describes an out-of-bounds read in Microsoft Office Excel that can allow an unauthenticated attacker to disclose information over the network. Affected product: Microsoft Excel within Office. Underlying cause is an out-of-bounds read; the CVSS 3.1 base score is 8.2 (High) with netw...

CVE-2026-55025

CVE-2026-55025 affects Microsoft Office Excel. Root cause: a type confusion in Excel handling resources that allows an unauthenticated attacker to run arbitrary code locally. The vulnerability is classified as high impact (CVSSv3.1: 7.8, High) with local attack vector, no privileges required, but...

CVE-2026-55141

CVE-2026-55141 is a Microsoft Office Excel vulnerability described as a stack-based buffer overflow that allows a local attacker to execute code on the affected system. The CVE entry identifies Excel as the affected product and lists a high impact with a CVSS3.1 score of 7.8 (Local, High confiden...

CVE-2026-68806

Microsoft Excel contains an out-of-bounds write vulnerability (CVE-2026-68806) that can allow an authenticated local attacker to execute code on the affected system. The CVE description specifies local code execution via an out-of-bounds write in Excel. The connected records confirm the issue is ...

CVE-2025-60727

CVE-2025-60727 affects Microsoft Excel (Office) with an out-of-bounds read in Excel that enables local code execution. The vulnerability is documented across multiple feeds (MSRC/MSKB entries, CNVD, EUVD) and is associated with Excel-related exploitation in November 2025 advisories. The available...

CVE-2026-55046

CVE-2026-55046 is an out-of-bounds read vulnerability in Microsoft Office Excel that allows an unauthorized attacker to disclose information locally. The CVE is documented in multiple feeds (NVD, MSRC, CIRCL sightings) with a CVSS v3.1 base score of 5.5 (Medium) and a local attack vector with use...

CVE-2026-68814

CVE-2026-68814 concerns Microsoft Excel (Office) with an out-of-bounds read vulnerability that can allow a local attacker to execute code. The CVSS 3.1 vector (LOCAL, LOW attack complexity, no privileges required, user interaction required) and impact data indicate high confidentiality, integrity...

CVE-2025-62556

Microsoft Excel remote code execution vulnerability CVE-2025-62556 is triggered by an untrusted pointer dereference in Excel, enabling local code execution. The issue is tied to Microsoft Office Excel components; multiple Nessus/NCSC/EUVD listings corroborate the family of Office Excel vulnerabil...

CVE-2026-32199

CVE-2026-32199 affects Microsoft Excel (Office) with a use-after-free in Excel that enables local code execution by an attacker. The vulnerability is listed under Excel-related issues in multiple advisories and is addressed by security updates from Microsoft (e.g., KB5002855 for Office Online Ser...

CVE-2026-55138

CVE-2026-55138 is an information disclosure vulnerability affecting Microsoft Excel (Office). The issue is caused by an untrusted pointer dereference in Excel, allowing a local attacker to disclose information on the affected system. CVSS shows a Local attack vector, user interaction required, wi...

CVE-2025-62564

CVE-2025-62564 affects Microsoft Excel within Office. The vulnerability is an out-of-bounds read in Excel that enables a local attacker to execute arbitrary code. CVSSv3.1 reflects a local attack with high impact (C/H/I/A = High) and no privileges required, with user interaction required. Microso...

CVE-2026-55048

CVE-2026-55048 affects Microsoft Office Excel (and overall Office ecosystem in related advisories) with an integer overflow/wraparound in Excel leading to local code execution. The official CVE notes an unauthorized attacker can execute code locally; attack vector is LOCAL with user interaction r...

CVE-2026-55058

CVE-2026-55058 is an out-of-bounds read vulnerability in Microsoft Office Excel . The issue enables a local attacker to achieve remote code execution on a vulnerable system, as indicated by the CVSS vector: LOCAL attack, LOW attack complexity, with no privileges required and user interaction need...

CVE-2026-55136

CVE-2026-55136 affects Microsoft Excel (part of Microsoft Office). The vulnerability is caused by an untrusted pointer dereference in Excel, enabling a local attacker to execute code on the affected system. CVSS 3.1 base score 7.8 (HIGH) with local access, no privileges required, user interaction...

CVE-2026-32197

CVE-2026-32197 is a vulnerability described across multiple sources as a Use-after-free in Microsoft Office Excel that allows an attacker to locally execute code. The Windows/Office context is supported by the primary CVE entry and the MACOS Nessus notes referencing Excel exploits in the April 20...

CVE-2026-55041

CVE-2026-55041 is a heap-based buffer overflow in Microsoft Office Excel that can allow a local attacker to execute arbitrary code. The issue affects Excel (and is reflected in the overall Office ecosystem advisories) and arises from a heap overflow in a component used by Excel. The CVSS v3.1 vec...

CVE-2025-62563

CVE-2025-62563 is a Use-After-Free vulnerability in Microsoft Excel that allows local code execution. The issue affects Microsoft Excel/Office components and is described in multiple feeds (CVE entry, EUVD/NCSC/CIRCL sightings, and vendor advisories). The core flaw is use-after-free in Excel, ena...

CVE-2026-20946

CVE-2026-20946 is an Out-of-bounds read in Microsoft Office Excel that allows local code execution. Connected sources confirm Excel/Office impact and provide remediation via the January 2026 security updates (e.g., KB5002831 for Excel 2016; MSRC update guidance). Affected products include Excel 2...

CVE-2026-26108

CVE-2026-26108 is a Microsoft Excel heap-based buffer overflow vulnerability that allows an attacker to execute code locally. Multiple connected sources corroborate Excel as the affected component, with the underlying issue described as a heap-based overflow leading to remote code execution in Ex...

CVE-2026-26112

CVE-2026-26112 is a Microsoft Excel remote code execution vulnerability caused by an untrusted pointer dereference in Excel. The issue affects Microsoft Office Excel components and can lead to the execution of arbitrary code on a vulnerable system, with local exploit requirements and user interac...

CVE-2026-55053

CVE-2026-55053 – Microsoft Excel heap-based buffer overflow in Microsoft Office Excel enables a local attacker to execute arbitrary code. The issue is described as a heap-based overflow affecting Excel, with the CVSS v3.1 vector indicating local attack, low attack complexity, and user interaction...

CVE-2026-55054

CVE-2026-55054 is an information-disclosure vulnerability in Microsoft Office Excel caused by an out-of-bounds read. The issue affects Excel and can leak data over a network; exploitation requires user interaction (per CVSS metrics: Network vector, Low attack complexity, No privileges, User inter...

CVE-2026-55948

CVE-2026-55948 is a use-after-free vulnerability in Microsoft Office Excel that can allow local code execution. Affected: Excel (Office). Root cause: use-after-free in the Excel component. Impact: HIGH for confidentiality, integrity, and availability. CVSS v3.1 base score 7.8; attack vector LOCAL...

CVE-2025-54901

CVE-2025-54901 affects Microsoft Excel (Office) with a buffer over-read that could allow a local attacker to disclose information. The CVE is linked to a Microsoft Excel information-disclosure vulnerability (CVE-2025-54901) with confirmed public references; the contribution notes indicate an info...

CVE-2025-62199

CVE-2025-62199 is a Microsoft Office remote code execution/use-after-free vulnerability. The CVE affects multiple Office components (notably Office and Excel) due to a memory-management flaw described as a use-after-free in Office, enabling a locally authenticated attacker to run arbitrary code. ...

CVE-2026-21261

CVE-2026-21261 describes an out-of-bounds read in Microsoft Excel that could allow a local attacker to disclose information. The issue affects Excel, with the root cause described as an out-of-bounds read in handling certain data, resulting in information disclosure (no impact on integrity or ava...

CVE-2026-58618

CVE-2026-58618 : Heap-based buffer overflow in Microsoft Office Excel can allow a local attacker to execute code. Affects Excel components implicated in the heap overflow; CVSS 3.1 base score 7.8 (High). Exploitation is local and requires user interaction. Current connected docs reference Microso...

CVE-2026-68801

CVE-2026-68801 describes a heap-based buffer overflow in Microsoft Excel that could allow an attacker to execute arbitrary code locally. The vulnerability arises from a heap overflow condition within Excel’s handling of certain input, leading to potential code execution with the user’s privileges...

CVE-2025-54903

CVE-2025-54903 is a Microsoft Excel remote code execution vulnerability described as a use-after-free in Excel that could allow an attacker to execute code locally. The CVSS 3.1 metrics indicate a local, low-attack-complexity, no privileges required, with user interaction required, and high impac...

CVE-2025-54904

CVE-2025-54904 is a use-after-free vulnerability in Microsoft Office Excel that allows an authenticated local attacker to execute code. The issue affects Excel/Office components and results in a local code execution impact with high severity. Microsoft has released a security update (KB5002776) t...

CVE-2026-32189

CVE-2026-32189 affects Microsoft Excel. The vulnerability allows Remote Code Execution with a Local attack vector, requiring user interaction, and does not require privileges. The base CVSSv3.1 rating is 7.8 (HIGH) with impact on confidentiality, integrity, and availability. Root cause details ar...

CVE-2026-55044

CVE-2026-55044: Out-of-bounds read in Microsoft Office Excel; vulnerability allows a local attacker to execute code. Affected product: Microsoft Office Excel. Root cause: out-of-bounds read (details not expanded in the provided docs). Impact: remote code execution on the local host with high seve...

CVE-2025-53741

CVE-2025-53741 is a Microsoft Excel remote code execution vulnerability caused by a heap-based buffer overflow in Excel. The CVE is linked to Office/Excel components and is rated HIGH (CVSS: LOCAL, LOW-EXPLOITABILITY, requiring user interaction). Corporate advisories and MSRC update guides indica...

CVE-2026-54988

CVE-2026-54988 is an out-of-bounds read vulnerability affecting Microsoft Excel, enabling a local attacker to disclose information. The existing sources confirm the vulnerability in Microsoft Office Excel with local access requiring user interaction, but do not specify exact vulnerable versions, ...

CVE-2025-53739

Microsoft Excel remote code execution via a type confusion error (CVE-2025-53739) affects Office Excel engines when handling specially crafted files. The issue is described as an incompatible type resource access leading to local code execution. Publicly documented impact states attacker-controll...

CVE-2025-54898

CVE-2025-54898 is a Microsoft Excel remote code execution vulnerability: an out-of-bounds read in Excel allows an attacker to run code locally on a user’s machine, with a local attack vector, no privileges required, and user interaction needed. The CVSS 3.1 vector is CVSS:3.1/AV:L/AC:L/PR:N/UI:R/...

CVE-2025-54899

CVE-2025-54899 is an Excel Remote Code Execution vulnerability due to heap memory management error in Microsoft Excel/Office components (freeing memory on the heap). The CVE has a 3.1 base score of 7.8 (HIGH) with LOCAL exploit and USER INTERACTION required, per Microsoft advisory. Public referen...

CVE-2025-54900

CVE-2025-54900 is a Microsoft Excel remote code execution vulnerability described as a heap-based buffer overflow in Excel that allows an attacker with local access to run code on the affected system. The CVE is documented for Microsoft Office Excel/Office products and is tracked with a high impa...

CVE-2026-40360

CVE-2026-40360 is an information-disclosure vulnerability in Microsoft Excel caused by an out-of-bounds read, enabling a local attacker to disclose data. The available documents identify the affected product as Microsoft Excel and describe a local attack that could lead to confidential informatio...

CVE-2026-55122

Technical details for CVE-2026-55122 are not publicly provided in the connected documents. The materials reference Excel Office vulnerabilities generally without specifics. Monitor for updates.

CVE-2025-59223

CVE-2025-59223 is a Microsoft Excel remote code execution vulnerability caused by a use-after-free in Excel. Connected sources confirm this CVE is part of a broader October 2025 Office/Excel/Mac updates package and is addressed by security updates from Microsoft (e.g., KB5002794 for Excel 2016) a...

CVE-2025-62560

Microsoft Excel/Office contains a local-code-execution vulnerability due to an untrusted pointer dereference in Excel. Affected product: Microsoft Excel (part of Microsoft Office). Root cause: untrusted pointer dereference within Excel’s code path. Impact: local code execution with high confident...

CVE-2026-50675

CVE-2026-50675 describes a heap-based buffer overflow in Microsoft Office Excel that allows a local attacker to execute code on the affected system. The connected sources confirm the issue is tied to Excel, with a high-severity CVSS 3.1 score (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). No specific vul...

CVE-2026-55137

CVE-2026-55137 in Microsoft Excel is a heap-based buffer overflow in Microsoft Office Excel that allows an unauthorized, locally executed code when a user opens a malicious file or link. The CVSS 3.1 vector (L, L, N, R, U, C/H/I/H/A/H) indicates a HIGH-severity, local attack requiring user intera...

CVE-2026-68807

CVE-2026-68807 describes a heap-based buffer overflow in Microsoft Office Excel that allows a local attacker to execute code. Affected product: Microsoft Excel; vulnerability type: heap-based overflow in a component handling input data, enabling remote-like control of the process after local code...

CVE-2025-59231

CVE-2025-59231 is a Microsoft Excel vulnerability described as a type-confusion in Excel that could allow an attacker with local access to execute code on the affected system. The associated Nessus findings and Microsoft advisories indicate multiple October 2025 office updates address this and re...

CVE-2025-60726

Microsoft Excel is affected by CVE-2025-60726 (Out-of-bounds read) which enables a local attacker to disclose sensitive data. The vulnerability is described as a information disclosure in Excel, with CVSS 3.1 score 7.1 (High) and local attack vector requiring user interaction. Connected sources c...

CVE-2026-55947

CVE-2026-55947 is a Microsoft Excel vulnerability described as a heap-based buffer overflow in Microsoft Office Excel that enables local code execution. Affected product: Microsoft Office Excel (Office suite). Root cause: heap-based buffer overflow in Excel components, leading to arbitrary code e...