Microsoft Excel vulnerabilities, page 2
499 vulnerabilities
Known vulnerabilities in Microsoft Excel, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2018-8382microsoftexcel+7
EPSS score12.26%
An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Microsoft Excel Viewer, Microsoft Office, Microsoft Excel.CVE-2018-8162microsoftexcel+4EPSS score24.25%
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Office, Microsoft Excel. This CVE ID is unique from CVE-2018-8147, CVE-2018-8148.CVE-2018-8598microsoftexcel+4EPSS score6.22%
An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Excel. This CVE ID is unique from CVE-2018-8627.CVE-2013-1315microsoftexcel+6EPSS score28.87%
Microsoft SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013; Office Web Apps 2010; Excel 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office for Mac 2011; Excel Viewer; and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."CVE-2013-3158microsoftexcelEPSS score18.78%
Microsoft Excel 2003 SP3 and 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."CVE-2013-3889microsoftexcel+4EPSS score27.40%
Microsoft Excel 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office for Mac 2011; Excel Viewer; Office Compatibility Pack SP3; and Excel Services and Word Automation Services in SharePoint Server 2013 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Excel Memory Corruption Vulnerability."CVE-2013-3890microsoftexcelEPSS score20.02%
Microsoft Excel 2007 SP3, Excel Viewer, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Excel Memory Corruption Vulnerability."CVE-2013-3159microsoftexcelEPSS score15.48%
Microsoft Excel 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Excel Viewer; and Microsoft Office Compatibility Pack SP3 allow remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka "XML External Entities Resolution Vulnerability."CVE-2021-40442microsoft365_apps+16EPSS score2.29%
Microsoft Excel Remote Code Execution VulnerabilityCVE-2021-40485microsoft365_apps+14EPSS score2.68%
Microsoft Excel Remote Code Execution VulnerabilityCVE-2021-40474microsoft365_apps+14EPSS score2.31%
Microsoft Excel Remote Code Execution VulnerabilityCVE-2021-40472microsoft365_apps+14EPSS score0.73%
Microsoft Excel Information Disclosure VulnerabilityCVE-2021-1713microsoft365_apps+12EPSS score3.34%
Microsoft Excel Remote Code Execution VulnerabilityCVE-2021-1714microsoft365_apps+18EPSS score3.34%
Microsoft Excel Remote Code Execution VulnerabilityCVE-2021-42292microsoft365_apps+14KEVEPSS score43.00%
Microsoft Excel Security Feature Bypass VulnerabilityCVE-2021-31939microsoft365_apps+11EPSS score13.34%
Microsoft Excel Remote Code Execution VulnerabilityCVE-2021-31177microsoft365_apps+12EPSS score3.06%
Microsoft Office Remote Code Execution VulnerabilityCVE-2021-31174microsoft365_apps+12EPSS score2.94%
Microsoft Excel Information Disclosure VulnerabilityCVE-2021-31175microsoft365_apps+12EPSS score3.16%
Microsoft Office Remote Code Execution VulnerabilityCVE-2021-31179microsoft365_apps+12EPSS score13.49%
Microsoft Office Remote Code Execution Vulnerability