cbcvebase.

Microsoft Excel vulnerabilities

438 known vulnerabilities affecting microsoft/excel.

Total CVEs
438
CISA KEV
6
actively exploited
Public exploits
34
Exploited in wild
21
Severity breakdown
CRITICAL128HIGH250MEDIUM59LOW1

Vulnerabilities

Page 12 of 22
CVE-2016-3233P3HIGHCVSS 7.3v2007v20102016-06-16
CVE-2016-3233 [HIGH] CWE-119 CVE-2016-3233: Microsoft Excel 2007 SP3, Excel 2010 SP2, and Office Compatibility Pack SP3 allow remote attackers t Microsoft Excel 2007 SP3, Excel 2010 SP2, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
nvd
CVE-2025-30377P3HIGHCVSS 7.8v20162025-05-13
CVE-2025-30377 [HIGH] CWE-416 CVE-2025-30377: Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
nvd
CVE-2025-62203P3HIGHCVSS 7.8v20162025-11-11
CVE-2025-62203 [HIGH] CWE-416 CVE-2025-62203: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-26108P3HIGHCVSS 7.8v20162026-03-10
CVE-2026-26108 [HIGH] CWE-122 CVE-2026-26108: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2025-62201P3HIGHCVSS 7.8v20162025-11-11
CVE-2025-62201 [HIGH] CWE-122 CVE-2025-62201: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-26107P3HIGHCVSS 7.8v20162026-03-10
CVE-2026-26107 [HIGH] CWE-416 CVE-2026-26107: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-20950P3HIGHCVSS 7.8v20162026-01-13
CVE-2026-20950 [HIGH] CWE-416 CVE-2026-20950: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-32189P3HIGHCVSS 7.8v20162026-04-14
CVE-2026-32189 [HIGH] CWE-416 CVE-2026-32189: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-40359P3HIGHCVSS 7.8v20162026-05-12
CVE-2026-40359 [HIGH] CWE-416 CVE-2026-40359: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-40362P3HIGHCVSS 7.8v20162026-05-12
CVE-2026-40362 [HIGH] CWE-122 CVE-2026-40362: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-50675P3HIGHCVSS 7.8v20162026-07-14
CVE-2026-50675 [HIGH] CWE-122 CVE-2026-50675: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-55131P3HIGHCVSS 7.8v20162026-07-14
CVE-2026-55131 [HIGH] CWE-122 CVE-2026-55131: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-55137P3HIGHCVSS 7.8v20162026-07-14
CVE-2026-55137 [HIGH] CWE-122 CVE-2026-55137: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-55041P3HIGHCVSS 7.8v20162026-07-14
CVE-2026-55041 [HIGH] CWE-122 CVE-2026-55041: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-55948P3HIGHCVSS 7.8v20162026-07-14
CVE-2026-55948 [HIGH] CWE-416 CVE-2026-55948: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-55029P3HIGHCVSS 7.8v20162026-07-14
CVE-2026-55029 [HIGH] CWE-122 CVE-2026-55029: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-55053P3HIGHCVSS 7.8v20162026-07-14
CVE-2026-55053 [HIGH] CWE-122 CVE-2026-55053: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-55037P3HIGHCVSS 7.8v20162026-07-14
CVE-2026-55037 [HIGH] CWE-122 CVE-2026-55037: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-55947P3HIGHCVSS 7.8v20162026-07-14
CVE-2026-55947 [HIGH] CWE-122 CVE-2026-55947: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-32198P3HIGHCVSS 7.8v20162026-04-14
CVE-2026-32198 [HIGH] CWE-416 CVE-2026-32198: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
Microsoft Excel vulnerabilities | cvebase