Filtered by vendor Microsoft Subscriptions
Filtered by product Excel Subscriptions
Total 377 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-53739 1 Microsoft 13 365, 365 Apps, Excel and 10 more 2025-08-15 7.8 High
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-53737 1 Microsoft 11 365, 365 Apps, Excel and 8 more 2025-08-15 7.8 High
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-53735 1 Microsoft 11 365, 365 Apps, Excel and 8 more 2025-08-15 7.8 High
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-53759 1 Microsoft 11 365, 365 Apps, Excel and 8 more 2025-08-15 7.8 High
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-53741 1 Microsoft 13 365, 365 Apps, Excel and 10 more 2025-08-15 7.8 High
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2007-0671 1 Microsoft 14 Access, Excel, Excel Viewer and 11 more 2025-08-13 8.8 High
Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as demonstrated by Exploit-MSExcel.h in targeted zero-day attacks.
CVE-2025-49711 1 Microsoft 5 365 Apps, Excel, Office and 2 more 2025-08-05 7.8 High
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-48812 1 Microsoft 5 365 Apps, Excel, Office and 2 more 2025-08-05 5.5 Medium
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2009-3129 1 Microsoft 4 Excel, Excel Viewer, Office and 1 more 2025-07-30 7.8 High
Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer 2003 SP3; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote attackers to execute arbitrary code via a spreadsheet with a FEATHEADER record containing an invalid cbHdrData size element that affects a pointer offset, aka "Excel Featheader Record Memory Corruption Vulnerability."
CVE-2016-7262 1 Microsoft 3 Excel, Excel Viewer, Office Compatibility Pack 2025-07-30 7.8 High
Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Viewer allow user-assisted remote attackers to execute arbitrary commands via a crafted cell that is mishandled upon a click, aka "Microsoft Office Security Feature Bypass Vulnerability."
CVE-2019-1297 1 Microsoft 3 Excel, Office, Office 365 Proplus 2025-07-30 8.8 High
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.
CVE-2021-27059 1 Microsoft 2 Excel, Office 2025-07-30 7.6 High
Microsoft Office Remote Code Execution Vulnerability
CVE-2021-42292 1 Microsoft 4 365 Apps, Excel, Office and 1 more 2025-07-30 7.8 High
Microsoft Excel Security Feature Bypass Vulnerability
CVE-2025-30376 1 Microsoft 5 365 Apps, Excel, Office and 2 more 2025-07-15 7.8 High
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-30381 1 Microsoft 5 365 Apps, Excel, Office and 2 more 2025-07-15 7.8 High
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-32704 1 Microsoft 4 365 Apps, Excel, Office and 1 more 2025-07-15 8.4 High
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-30383 1 Microsoft 5 365 Apps, Excel, Office and 2 more 2025-07-15 7.8 High
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-30379 1 Microsoft 5 365 Apps, Excel, Office and 2 more 2025-07-15 7.8 High
Release of invalid pointer or reference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-30377 1 Microsoft 5 365 Apps, Excel, Office and 2 more 2025-07-15 8.4 High
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-30375 1 Microsoft 5 365 Apps, Excel, Office and 2 more 2025-07-15 7.8 High
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.