Excel

CVEs (531)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2020-1495	Microsoft Excel	Hig	0.58	8.8	0.04	Aug 17, 2020	A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is…
CVE-2020-1494	Microsoft Excel	Hig	0.58	8.8	0.04	Aug 17, 2020	A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is…
CVE-2020-1240	Microsoft Excel	Hig	0.58	8.8	0.14	Jul 14, 2020	A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.
CVE-2020-0979	Microsoft Excel	Hig	0.58	8.8	0.11	Apr 15, 2020	A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0906.
CVE-2020-0906	Microsoft Excel	Hig	0.58	8.8	0.11	Apr 15, 2020	A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0979.
CVE-2020-0760	Microsoft Office	Hig	0.58	8.8	0.09	Apr 15, 2020	A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka 'Microsoft Office Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0991.
CVE-2020-0759	Microsoft Excel	Hig	0.58	8.8	0.15	Feb 11, 2020	A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.
CVE-2019-1327	Microsoft Excel	Hig	0.58	8.8	0.13	Oct 10, 2019	A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1331.
CVE-2019-1111	Microsoft Excel	Hig	0.58	8.8	0.13	Jul 15, 2019	A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1110.
CVE-2019-1110	Microsoft Excel	Hig	0.58	8.8	0.13	Jul 15, 2019	A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1111.
CVE-2026-65807	Microsoft Office	Hig	0.57	8.8	0.00	Aug 11, 2026	Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-62870	Microsoft Office	Hig	0.57	8.8	0.01	Aug 4, 2026	Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2022-41106	Microsoft Excel	Hig	0.57	8.8	0.02	Nov 9, 2022	Microsoft Excel Remote Code Execution Vulnerability
CVE-2022-21840	Microsoft Office	Hig	0.57	8.8	0.03	Jan 11, 2022	Microsoft Office Remote Code Execution Vulnerability
CVE-2016-0122	Microsoft Excel	Hig	0.57	7.8	0.41	Apr 12, 2016	Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Word 2016 for Mac, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption…
CVE-2010-0258	Microsoft Office	Hig	0.56	7.8	0.61	Mar 10, 2010	Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 do not properly…
CVE-2026-26109	Microsoft Office	Hig	0.55	8.4	0.00	Mar 10, 2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-32704	Microsoft Office	Hig	0.55	8.4	0.00	May 13, 2025	Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-30377	Microsoft Office	Hig	0.55	8.4	0.01	May 13, 2025	Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-21362	Microsoft Excel	Hig	0.55	8.4	0.01	Jan 14, 2025	Microsoft Excel Remote Code Execution Vulnerability

CVE-2020-1495HigAug 17, 2020
Microsoft
Excel
risk 0.58cvss 8.8epss 0.04
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is…
CVE-2020-1494HigAug 17, 2020
Microsoft
Excel
risk 0.58cvss 8.8epss 0.04
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is…
CVE-2020-1240HigJul 14, 2020
Microsoft
Excel
risk 0.58cvss 8.8epss 0.14
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.
CVE-2020-0979HigApr 15, 2020
Microsoft
Excel
risk 0.58cvss 8.8epss 0.11
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0906.
CVE-2020-0906HigApr 15, 2020
Microsoft
Excel
risk 0.58cvss 8.8epss 0.11
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0979.
CVE-2020-0760HigApr 15, 2020
Microsoft
Office
risk 0.58cvss 8.8epss 0.09
A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka 'Microsoft Office Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0991.
CVE-2020-0759HigFeb 11, 2020
Microsoft
Excel
risk 0.58cvss 8.8epss 0.15
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.
CVE-2019-1327HigOct 10, 2019
Microsoft
Excel
risk 0.58cvss 8.8epss 0.13
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1331.
CVE-2019-1111HigJul 15, 2019
Microsoft
Excel
risk 0.58cvss 8.8epss 0.13
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1110.
CVE-2019-1110HigJul 15, 2019
Microsoft
Excel
risk 0.58cvss 8.8epss 0.13
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1111.
CVE-2026-65807HigAug 11, 2026
Microsoft
Office
risk 0.57cvss 8.8epss 0.00
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-62870HigAug 4, 2026
Microsoft
Office
risk 0.57cvss 8.8epss 0.01
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2022-41106HigNov 9, 2022
Microsoft
Excel
risk 0.57cvss 8.8epss 0.02
Microsoft Excel Remote Code Execution Vulnerability
CVE-2022-21840HigJan 11, 2022
Microsoft
Office
risk 0.57cvss 8.8epss 0.03
Microsoft Office Remote Code Execution Vulnerability
CVE-2016-0122HigApr 12, 2016
Microsoft
Excel
risk 0.57cvss 7.8epss 0.41
Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Word 2016 for Mac, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption…
CVE-2010-0258HigMar 10, 2010
Microsoft
Office
risk 0.56cvss 7.8epss 0.61
Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 do not properly…
CVE-2026-26109HigMar 10, 2026
Microsoft
Office
risk 0.55cvss 8.4epss 0.00
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-32704HigMay 13, 2025
Microsoft
Office
risk 0.55cvss 8.4epss 0.00
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-30377HigMay 13, 2025
Microsoft
Office
risk 0.55cvss 8.4epss 0.01
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-21362HigJan 14, 2025
Microsoft
Excel
risk 0.55cvss 8.4epss 0.01
Microsoft Excel Remote Code Execution Vulnerability

Page 2 of 27