VYPR
← All advisories
High severity7.8NVD Advisory· Published Mar 14, 2018· Updated Jun 17, 2026

CVE-2018-0907

CVE-2018-0907

Description

Microsoft Excel 2007 SP3, Microsoft Excel 2010 SP2, Microsoft Excel 2013 SP1, Microsoft Excel 2016, Microsoft Office 2016 Click-to-Run and Microsoft Office 2016 for Mac allow a security feature bypass vulnerability due to how macro settings are enforced, aka "Microsoft Office Excel Security Feature Bypass".

Affected products

9
  • Microsoft/Excel5 versions
    cpe:2.3:a:microsoft:excel:2007:sp2:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:microsoft:excel:2007:sp2:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:excel:2007:sp3:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:excel:2013:sp1:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:*:*
    • (no CPE)
  • Microsoft/Office3 versions
    cpe:2.3:a:microsoft:office:2016:*:*:*:*:mac_os_x:*:*+ 2 more
    • cpe:2.3:a:microsoft:office:2016:*:*:*:*:mac_os_x:*:*
    • cpe:2.3:a:microsoft:office:2016:*:*:*:click-to-run:*:*:*
    • (no CPE)
  • Microsoft Corporation/Microsoft Excelv5
    Range: Microsoft Excel 2007 SP3, Microssoft Excel 2010 SP2, Microsoft Excel 2013 SP1, Microsoft Excel 2016, Microsoft Office 2016 Click-to-Run and Microsoft Office 2016 for Mac

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.