Excel Security Vulnerabilities and Issues — Excel CVE List

Lucene search

MicrosoftExcel

204 matches found

CVE•added 2019/09/11 10:15 p.m.•1040 views

CVE-2019-1297

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.

9.3CVSS8.8AI score0.56776EPSS

CVE•added 2009/11/11 7:30 p.m.•952 views

CVE-2009-3129

Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer 2003 SP3; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows re...

9.3CVSS7.5AI score0.8993EPSS

CVE•added 2022/05/10 9:15 p.m.•246 views

CVE-2022-29110

Microsoft Excel Remote Code Execution Vulnerability

9.3CVSS7.8AI score0.03139EPSS

CVE•added 2017/11/15 3:29 a.m.•235 views

CVE-2017-11884

Microsoft Excel 2016 Click-to-Run (C2R) allows an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11882.

9.3CVSS8.3AI score0.94384EPSS

CVE•added 2022/04/15 7:15 p.m.•208 views

CVE-2022-26903

Windows Graphics Component Remote Code Execution Vulnerability

9.3CVSS8.8AI score0.01609EPSS

CVE•added 2019/07/29 2:9 p.m.•201 views

CVE-2019-1111

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1110.

9.3CVSS8.8AI score0.27063EPSS

CVE•added 2020/01/14 11:15 p.m.•193 views

CVE-2020-0650

9.3CVSS7.9AI score0.33474EPSS

CVE•added 2019/07/29 2:8 p.m.•182 views

CVE-2019-1110

9.3CVSS8.8AI score0.27063EPSS

CVE•added 2012/05/09 12:55 a.m.•176 views

CVE-2012-1847

Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2008 and 2011 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 do not properly handle memory during the opening of files, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka ...

9.3CVSS7.9AI score0.63939EPSS

CVE•added 2020/12/10 12:15 a.m.•170 views

CVE-2020-17128

Microsoft Excel Remote Code Execution Vulnerability

9.3CVSS7.8AI score0.05864EPSS

CVE•added 2020/06/09 8:15 p.m.•158 views

CVE-2020-1225

9.3CVSS8.5AI score0.20625EPSS

CVE•added 2019/11/12 7:15 p.m.•152 views

CVE-2019-1448

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.

9.3CVSS7.9AI score0.38019EPSS

CVE•added 2012/05/09 12:55 a.m.•150 views

CVE-2012-0142

Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2008 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 do not properly handle memory during the opening of files, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Fi...

9.3CVSS7.4AI score0.62114EPSS

CVE•added 2012/05/09 12:55 a.m.•147 views

CVE-2012-0184

9.3CVSS7.5AI score0.58804EPSS

CVE•added 2011/09/15 12:26 p.m.•145 views

CVE-2011-1986

Use-after-free vulnerability in Microsoft Excel 2003 SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Use after Free WriteAV Vulnerability."

9.3CVSS7.6AI score0.62366EPSS

CVE•added 2020/12/10 12:15 a.m.•144 views

CVE-2020-17123

Microsoft Excel Remote Code Execution Vulnerability

9.3CVSS7.8AI score0.04999EPSS

CVE•added 2020/06/09 8:15 p.m.•143 views

CVE-2020-1226

9.3CVSS8.5AI score0.20625EPSS

CVE•added 2011/09/15 12:26 p.m.•142 views

CVE-2011-1988

Microsoft Excel 2003 SP3 and 2007 SP2; Excel in Office 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 do not properly parse records in Excel spreadsheets, which all...

9.3CVSS7.4AI score0.58631EPSS

CVE•added 2012/11/14 12:55 a.m.•142 views

CVE-2012-2543

Stack-based buffer overflow in Microsoft Excel 2007 SP2 and SP3 and 2010 SP1; Office 2011 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Stack Overflow Vulnerability."

9.3CVSS7.9AI score0.65939EPSS

CVE•added 2020/12/10 12:15 a.m.•134 views

CVE-2020-17129

Microsoft Excel Remote Code Execution Vulnerability

9.3CVSS7.8AI score0.06001EPSS

CVE•added 2013/09/11 2:3 p.m.•133 views

CVE-2013-1315

Microsoft SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013; Office Web Apps 2010; Excel 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office for Mac 2011; Excel Viewer; and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (...

9.3CVSS7.6AI score0.69342EPSS

CVE•added 2011/04/13 6:55 p.m.•132 views

CVE-2011-0097

Integer underflow in Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute arbitrary code ...

9.3CVSS7.6AI score0.63845EPSS

CVE•added 2012/05/09 12:55 a.m.•131 views

CVE-2012-0141

Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2011 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 do not properly handle memory during the opening of files, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Fi...

9.3CVSS7.5AI score0.64174EPSS

CVE•added 2009/11/11 8:30 p.m.•130 views

CVE-2009-3130

Heap-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via a spreadsheet containing a malformed Binary File Format (aka BIFF) record that triggers memory corruption, ak...

9.3CVSS7.7AI score0.63952EPSS

CVE•added 2012/05/09 12:55 a.m.•130 views

CVE-2012-0143

Microsoft Excel 2003 SP3 and Office 2008 for Mac do not properly handle memory during the opening of files, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Memory Corruption Using Various Modified Bytes Vulnerability."

9.3CVSS7.5AI score0.60557EPSS

CVE•added 2012/11/14 12:55 a.m.•129 views

CVE-2012-1885

Heap-based buffer overflow in Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Office 2008 and 2011 for Mac; and Office Compatibility Pack SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel SerAuxErrBar Heap Overflow Vulnerability."

9.3CVSS7.9AI score0.65939EPSS

CVE•added 2011/06/16 8:55 p.m.•126 views

CVE-2011-1273

Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 do not properly validate record information during parsing of Ex...

9.3CVSS7.6AI score0.50077EPSS

CVE•added 2013/09/11 2:3 p.m.•126 views

CVE-2013-3158

Microsoft Excel 2003 SP3 and 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."

9.3CVSS7.6AI score0.52417EPSS

CVE•added 2020/12/10 12:15 a.m.•126 views

CVE-2020-17125

Microsoft Excel Remote Code Execution Vulnerability

9.3CVSS7.8AI score0.06001EPSS

CVE•added 2020/04/15 3:15 p.m.•125 views

CVE-2020-0906

9.3CVSS8.8AI score0.32912EPSS

CVE•added 2020/12/10 12:15 a.m.•124 views

CVE-2020-17127

Microsoft Excel Remote Code Execution Vulnerability

9.3CVSS7.8AI score0.06001EPSS

CVE•added 2020/08/17 7:15 p.m.•121 views

CVE-2020-1495

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administ...

9.3CVSS8.7AI score0.15901EPSS

CVE•added 2020/02/11 10:15 p.m.•120 views

CVE-2020-0759

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.

9.3CVSS8.8AI score0.32912EPSS

CVE•added 2017/09/13 1:29 a.m.•118 views

CVE-2017-8631

A remote code execution vulnerability exists in Excel Services, Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2016, Microsoft Office Web Apps 2013, Microsoft Office Compatibility...

9.3CVSS7.6AI score0.27499EPSS

CVE•added 2020/05/21 11:15 p.m.•113 views

CVE-2020-0901

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.

9.8CVSS8.8AI score0.45859EPSS

CVE•added 2004/09/28 4:0 a.m.•112 views

CVE-2004-0200

Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM field length that is normalized to a large integer length before a memory copy oper...

9.3CVSS7.6AI score0.75514EPSS

CVE•added 2020/01/14 11:15 p.m.•110 views

CVE-2020-0651

9.3CVSS7.9AI score0.33474EPSS

CVE•added 2020/08/17 7:15 p.m.•110 views

CVE-2020-1496

9.3CVSS8.7AI score0.15375EPSS

CVE•added 2017/11/15 3:29 a.m.•109 views

CVE-2017-11878

Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2016, Microsoft Office Compatibility Pack Service Pack 3, and Microsoft Excel Viewer 2007 Service Pack 3 allow an attacker to run ar...

9.3CVSS7.4AI score0.10505EPSS

CVE•added 2019/10/10 2:15 p.m.•106 views

CVE-2019-1331

9.3CVSS8.8AI score0.37247EPSS

CVE•added 2020/08/17 7:15 p.m.•106 views

CVE-2020-1498

9.3CVSS8.7AI score0.15901EPSS

CVE•added 2020/08/17 7:15 p.m.•104 views

CVE-2020-1494

9.3CVSS8.7AI score0.15375EPSS

CVE•added 2019/04/09 9:29 p.m.•100 views

CVE-2019-0828

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.

9.3CVSS7.8AI score0.25636EPSS

CVE•added 2016/04/12 11:59 p.m.•94 views

CVE-2016-0122

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Word 2016 for Mac, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."

9.3CVSS7.8AI score0.39916EPSS

CVE•added 2017/03/17 12:59 a.m.•94 views

CVE-2017-0020

Microsoft Excel 2016, Excel 2010 SP2, Excel 2013 RT SP1, and Office Web Apps Server 2013 SP1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability." This vulnerability is differ...

9.3CVSS6.7AI score0.23473EPSS

CVE•added 2018/11/14 1:29 a.m.•94 views

CVE-2018-8577

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Office, Office 365 ProPlus, Microsoft Excel, Microsoft Excel Viewer, Excel. This C...

9.3CVSS7.9AI score0.19365EPSS

CVE•added 2017/06/15 1:29 a.m.•92 views

CVE-2017-8510

A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-8509, CVE-2017-8511, CVE-2017-8512, CVE-2017-0260, and CVE-2017-8506.

9.3CVSS7.2AI score0.36403EPSS

CVE•added 2017/03/17 12:59 a.m.•90 views

CVE-2017-0052

Microsoft Office Compatibility Pack SP3, Excel 2007 SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability." T...

9.3CVSS6.7AI score0.23473EPSS

CVE•added 2019/10/10 2:15 p.m.•90 views

CVE-2019-1327

9.3CVSS8.8AI score0.37247EPSS

CVE•added 2020/11/11 7:15 a.m.•90 views

CVE-2020-17065

Microsoft Excel Remote Code Execution Vulnerability

9.3CVSS7.8AI score0.04588EPSS

Total number of security vulnerabilities204