CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Microsoft Excel Security Feature Bypass and Remote Code Execution Vulnerability (CVE-2021-42292) Analysis & Mitigation Guide
[Affected Scope] Broad range of Microsoft Office suites including Microsoft Excel 2013, 2016, 2019, 2021, Microsoft 365 Apps, and Office LTSC 2021
[Impact] Attackers can bypass security warnings and Protected View to execute arbitrary code with the user's privileges by tricking them into opening a specially crafted Excel file
[Mitigation] Apply official Microsoft security patches immediately, restrict execution of untrusted email attachments, and enforce strict macro blocking policies
Microsoft Office Remote Code Execution Vulnerability (CVE-2021-27059) Technical Advisory
[Affected Scope] Unpatched versions of Microsoft Office and Excel suites
[Impact] Remote attackers can execute arbitrary code under the context of the current user via crafted Office documents
[Mitigation] Apply the official Microsoft security patches immediately and restrict opening untrusted attachments
Microsoft Excel Memory Corruption Remote Code Execution Vulnerability (CVE-2019-1297) Analysis and Mitigation Guide
[Affected Scope] Multiple Microsoft Office and Excel versions including Excel 2010, 2013, 2016, 2019, and Office 365 ProPlus
[Impact] Successful exploitation allows remote attackers to execute arbitrary code in the context of the current user by tricking them into opening a specially crafted Excel file
[Mitigation] Apply official Microsoft security patches immediately and enforce strict attachment filtering policies
Microsoft Office Equation Editor Memory Corruption Remote Code Execution Vulnerability (CVE-2017-11882) Technical Advisory
[Affected Scope] Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, 2016, and systems utilizing the legacy Equation Editor (EQNEDT32.EXE) component
[Impact] Successful exploitation allows remote attackers to execute arbitrary code (RCE) in the context of the current user by tricking them into opening a specially crafted Office document
[Mitigation] Apply the official Microsoft security updates immediately, or disable the Equation Editor component via registry modification to prevent execution
Microsoft Office OLE Composite Moniker Remote Code Execution Vulnerability (CVE-2017-8570) Analysis and Mitigation Guide
[Affected Scope] Microsoft Office 2007, 2010, 2013, 2016 and related productivity components
[Impact] Remote attackers can execute arbitrary code with the privileges of the current user via crafted Office documents containing malicious OLE objects
[Mitigation] Apply official Microsoft security patches immediately and restrict the execution of untrusted OLE/ActiveX components
Microsoft Excel Remote Code Execution and Security Feature Bypass Vulnerability (CVE-2016-7262)
[Affected Scope] Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Viewer
[Impact] User-assisted remote attackers can execute arbitrary commands with the logged-in user's privileges by tricking a user into clicking a crafted cell
[Mitigation] Apply the official Microsoft MS16-148 security update immediately and restrict opening untrusted Office documents
Microsoft Office EPS Image Parsing Remote Code Execution Vulnerability (CVE-2015-2545) Technical Analysis and Mitigation Guide
[Affected Scope] Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2013 RT SP1
[Impact] Remote attackers can execute arbitrary code with the privileges of the active user and compromise the host system by tricking a user into opening a document containing a malformed EPS image
[Mitigation] Apply the official MS15-099 security update immediately, or disable the EPS graphics filter via registry modifications to prevent exploitation
Microsoft Excel FEATHEADER Record Memory Corruption and Remote Code Execution Vulnerability (CVE-2009-3129)
[Affected Scope] Microsoft Excel 2002/2003/2007, Office 2004/2008 for Mac, Excel Viewer, and Office Compatibility Pack
[Impact] Opening a specially crafted spreadsheet containing a malicious FEATHEADER record can trigger memory corruption, leading to arbitrary code execution
[Mitigation] Apply the official Microsoft MS09-067 security update immediately and restrict opening untrusted legacy Office documents
Microsoft Excel Object Record Corruption Remote Code Execution Vulnerability (CVE-2009-0557, MS09-021)
[Affected Scope] Microsoft Office 2000 SP3, XP SP3, 2003 SP3, 2007 SP1/SP2, Office for Mac 2004/2008, Excel Viewer, and Compatibility Pack
[Impact] Remote attackers can execute arbitrary code with the privileges of the active user by tricking them into opening a specially crafted Excel file
[Mitigation] Immediately apply the official Microsoft MS09-021 security update and restrict the execution of untrusted spreadsheet files
Microsoft Excel Invalid Object Reference Remote Code Execution Vulnerability (CVE-2009-0238) Advisory
[Affected Scope] Microsoft Office Excel 2000 through 2007, Excel Viewer, Office for Mac 2004/2008, and Compatibility Pack.
[Impact] Opening a specially crafted Excel document can trigger an access attempt on an invalid object, allowing remote attackers to execute arbitrary code.
[Mitigation] Apply the official Microsoft security patches immediately and restrict opening untrusted Excel attachments.
Microsoft Excel Remote Code Execution (RCE) Zero-Day Vulnerability (CVE-2007-0671)
[Affected Scope] Microsoft Excel 2000, XP, 2003, Excel 2004 for Mac, and potentially other legacy Office products
[Impact] Remote attackers can execute arbitrary code with the privileges of the active user by tricking them into opening a specially crafted Excel file
[Mitigation] Apply official Microsoft security patches immediately, restrict opening untrusted Excel attachments, and enforce strict macro execution policies