Microsoft Excel vulnerabilities

CVE-2026-32199 [HIGH] CWE-416 CVE-2026-32199: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-32197 [HIGH] CWE-416 CVE-2026-32197: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-58618 [HIGH] CWE-122 CVE-2026-58618: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2011-1275 [CRITICAL] CWE-119 CVE-2011-1275: Microsoft Excel 2002 SP3; Office 2004, 2008, and 2011 for Mac; and Open XML File Format Converter fo Microsoft Excel 2002 SP3; Office 2004, 2008, and 2011 for Mac; and Open XML File Format Converter for Mac do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet, aka "Excel Memory Heap Overwrit

CVE-2012-5672 [MEDIUM] CVE-2012-5672: Microsoft Excel Viewer (aka Xlview.exe) and Excel in Microsoft Office 2007 (aka Office 12) allow rem Microsoft Excel Viewer (aka Xlview.exe) and Excel in Microsoft Office 2007 (aka Office 12) allow remote attackers to cause a denial of service (read access violation and application crash) via a crafted spreadsheet file, as demonstrated by a .xls file with battery voltage data.

CVE-2025-54904 [HIGH] CWE-416 CVE-2025-54904: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2025-54896 [HIGH] CWE-416 CVE-2025-54896: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2025-54903 [HIGH] CWE-416 CVE-2025-54903: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2025-54900 [HIGH] CWE-122 CVE-2025-54900: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2025-59225 [HIGH] CWE-416 CVE-2025-59225: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2025-59224 [HIGH] CWE-416 CVE-2025-59224: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2025-59223 [HIGH] CWE-416 CVE-2025-59223: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-55141 [HIGH] CWE-121 CVE-2026-55141: Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute cod Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-55899 [HIGH] CWE-20 CVE-2026-55899: Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute cod Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2016-3279 [MEDIUM] CWE-254 CVE-2016-3279: Microsoft Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2, Excel 2013 SP1, Power Microsoft Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2, Excel 2013 SP1, PowerPoint 2013 SP1, Word 2013 SP1, Excel 2013 RT SP1, PowerPoint 2013 RT SP1, Word 2013 RT SP1, Excel 2016, Word 2016, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2 allow remote attackers to execute arbitrary code via

CVE-2006-2388 [CRITICAL] CWE-94 CVE-2006-2388: Microsoft Office Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code vi Microsoft Office Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via malformed cell comments, which lead to modification of "critical data offsets" during the rebuilding process.

CVE-2025-53735 [HIGH] CWE-416 CVE-2025-53735: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2025-53737 [HIGH] CWE-122 CVE-2025-53737: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2025-53741 [HIGH] CWE-122 CVE-2025-53741: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-26109 [HIGH] CWE-125 CVE-2026-26109: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.