cbcvebase.

Microsoft Excel vulnerabilities

494 known vulnerabilities affecting microsoft/excel.

Total CVEs
494
CISA KEV
6
actively exploited
Public exploits
34
Exploited in wild
21
Severity breakdown
CRITICAL128HIGH288MEDIUM77LOW1

Vulnerabilities

Page 17 of 25
CVE-2025-54899P3HIGHCVSS 7.8v20162025-09-09
CVE-2025-54899 [HIGH] CWE-590 CVE-2025-54899: Free of memory not on the heap in Microsoft Office Excel allows an unauthorized attacker to execute Free of memory not on the heap in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-26112P3HIGHCVSS 7.8v20162026-03-10
CVE-2026-26112 [HIGH] CWE-822 CVE-2026-26112: Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute c Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-81957P3HIGHCVSS 7.8v20162026-09-08
CVE-2026-81957 [HIGH] CWE-125 CVE-2026-81957: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-81956P3HIGHCVSS 7.8v20162026-09-08
CVE-2026-81956 [HIGH] CWE-125 CVE-2026-81956: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-68793P3HIGHCVSS 7.8v20162026-08-11
CVE-2026-68793 [HIGH] CWE-125 CVE-2026-68793: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-68804P3HIGHCVSS 7.8v20162026-08-11
CVE-2026-68804 [HIGH] CWE-122 CVE-2026-68804: Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code l Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-68814P3HIGHCVSS 7.8v20162026-08-11
CVE-2026-68814 [HIGH] CWE-125 CVE-2026-68814: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-68810P3HIGHCVSS 7.8v20162026-08-11
CVE-2026-68810 [HIGH] CWE-822 CVE-2026-68810: Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute c Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-55031P3HIGHCVSS 7.8v20162026-07-14
CVE-2026-55031 [HIGH] CWE-125 CVE-2026-55031: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-55058P3HIGHCVSS 7.8v20162026-07-14
CVE-2026-55058 [HIGH] CWE-125 CVE-2026-55058: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-55044P3HIGHCVSS 7.8v20162026-07-14
CVE-2026-55044 [HIGH] CWE-125 CVE-2026-55044: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-55136P3HIGHCVSS 7.8v20162026-07-14
CVE-2026-55136 [HIGH] CWE-822 CVE-2026-55136: Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute c Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2025-32704P3HIGHCVSS 7.8v20162025-05-13
CVE-2025-32704 [HIGH] CWE-126 CVE-2025-32704: Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2025-59225P3HIGHCVSS 7.8v20162025-10-14
CVE-2025-59225 [HIGH] CWE-416 CVE-2025-59225: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2025-59224P3HIGHCVSS 7.8v20162025-10-14
CVE-2025-59224 [HIGH] CWE-416 CVE-2025-59224: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2025-59223P3HIGHCVSS 7.8v20162025-10-14
CVE-2025-59223 [HIGH] CWE-416 CVE-2025-59223: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-44823P3HIGHCVSS 7.8v20162026-06-09
CVE-2026-44823 [HIGH] CWE-197 CVE-2026-44823: Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code l Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2017-11878P3HIGHCVSS 7.8v2007v2010+2 more2017-11-15
CVE-2017-11878 [HIGH] CWE-119 CVE-2017-11878: Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Servi Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2016, Microsoft Office Compatibility Pack Service Pack 3, and Microsoft Excel Viewer 2007 Service Pack 3 allow an attacker to run arbitrary code in the context of the current user by fai
nvd
CVE-2020-17066P3HIGHCVSS 7.8v20102020-11-11
CVE-2020-17066 [HIGH] CVE-2020-17066: Microsoft Excel Remote Code Execution Vulnerability Microsoft Excel Remote Code Execution Vulnerability
nvd
CVE-2020-17065P3HIGHCVSS 7.8v2010v2013+1 more2020-11-11
CVE-2020-17065 [HIGH] CVE-2020-17065: Microsoft Excel Remote Code Execution Vulnerability Microsoft Excel Remote Code Execution Vulnerability
nvd
Microsoft Excel vulnerabilities | cvebase