Microsoft Excel vulnerabilities

CVE-2025-59233 [HIGH] CWE-843 CVE-2025-59233: Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an un Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2025-49711 [HIGH] CWE-416 CVE-2025-49711: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-20957 [HIGH] CWE-122 CVE-2026-20957: Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-55024 [HIGH] CWE-843 CVE-2026-55024: Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an un Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-44817 [HIGH] CWE-843 CVE-2026-44817: Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an un Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-45469 [HIGH] CWE-122 CVE-2026-45469: Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-55036 [HIGH] CWE-126 CVE-2026-55036: Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-55025 [HIGH] CWE-843 CVE-2026-55025: Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an un Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2006-3877 [CRITICAL] CVE-2006-3877: Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office 2002, Office 2003, Office 2 Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office 2002, Office 2003, Office 2004 for Mac, and Office v.X for Mac allows user-assisted attackers to execute arbitrary code via an unspecified "crafted file," a different vulnerability than CVE-2006-3435, CVE-2006-4694, and CVE-2006-3876.

CVE-2022-29110 [HIGH] CVE-2022-29110: Microsoft Excel Remote Code Execution Vulnerability Microsoft Excel Remote Code Execution Vulnerability

CVE-2021-27053 [HIGH] CVE-2021-27053: Microsoft Excel Remote Code Execution Vulnerability Microsoft Excel Remote Code Execution Vulnerability

CVE-2016-7265 [HIGH] CWE-125 CVE-2016-7265: Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Comp Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, Excel Viewer, Excel Services on SharePoint Server 2007 SP3, and Excel Services on SharePoint Server 2010 SP2 allow remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) v

CVE-2024-30042 [HIGH] CWE-502 CVE-2024-30042: Microsoft Excel Remote Code Execution Vulnerability Microsoft Excel Remote Code Execution Vulnerability

CVE-2007-1214 [MEDIUM] CWE-119 CVE-2007-1214: Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2003 Viewer, and 2004 for Mac allows user-assisted rem Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2003 Viewer, and 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a crafted AutoFilter filter record in an Excel BIFF8 format XLS file, which triggers memory corruption.

CVE-2025-24075 [HIGH] CWE-121 CVE-2025-24075: Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute cod Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2025-62556 [HIGH] CWE-822 CVE-2025-62556: Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute c Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2025-62564 [HIGH] CWE-125 CVE-2025-62564: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2025-62560 [HIGH] CWE-126 CVE-2025-62560: Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute c Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2025-62561 [HIGH] CWE-822 CVE-2025-62561: Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute c Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-26112 [HIGH] CWE-822 CVE-2026-26112: Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute c Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.