EX
Product
Excel
On CISA KEVExploited in the wild
502
CVEs
6
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 279Medium 59Low 1
Watch
Add Excel to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-1297 In wildKEV | 8.8 | Sep 11 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2010; 2013; 2013; 2016 |
| CVE-2009-0238 In wildKEV | 8.8 | Feb 25 | Microsoft Office Remote Code Execution Affected: 2000; 2002; 2003; 2007 |
| CVE-2007-0671 In wildKEV | 8.8 | Feb 3 | Microsoft Office Excel Remote Code Execution Vulnerability Affected: 2000; 2002; 2003 |
| CVE-2021-42292 In wildKEV | 7.8 | Nov 10 | Microsoft Excel Security Feature Bypass Vulnerability Affected: 2013; 2013; 2016; 2016 |
| CVE-2016-7262 In wildKEV | 7.8 | Dec 20 | Microsoft Office Security Feature Bypass Vulnerability Affected: 2007; 2010; 2013; 2013; 2016 |
| CVE-2009-3129 In wildKEV | 7.8 | Nov 11 | Microsoft Excel Featheader Record Memory Corruption Vulnerability Affected: 2002; 2003; 2007; 2007 |
| CVE-2008-0081 | 9.8 | Jan 16 | Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via… Affected: 2000; 2002; 2003 |
| CVE-2024-43106 | 9.1 | Dec 18 | A library injection vulnerability exists in Microsoft Excel 16.83 for macOS Affected: 16.83 for macOS |
| CVE-2026-78518 | 8.8 | Sep 8 | Microsoft Office Excel Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-65807 | 8.8 | Aug 11 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-62870 | 8.8 | Aug 3 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2022-41106 | 8.8 | Nov 9 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2013; 2013; 2016 |
| CVE-2022-21840 | 8.8 | Jan 11 | Microsoft Office Remote Code Execution Vulnerability Affected: 2013; 2013; 2016; 2016 |
| CVE-2020-1504 | 8.8 | Aug 17 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory Affected: 2010 |
| CVE-2020-1498 | 8.8 | Aug 17 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory Affected: 2010; 2013; 2013; 2016 |
| CVE-2020-1496 | 8.8 | Aug 17 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory Affected: 2010; 2013; 2013; 2016 |
| CVE-2020-1495 | 8.8 | Aug 17 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory Affected: 2010; 2013; 2013; 2016 |
| CVE-2020-1494 | 8.8 | Aug 17 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory Affected: 2010; 2013; 2013; 2016 |
| CVE-2020-1226 | 8.8 | Jun 9 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution… Affected: 2010; 2013; 2013; 2016 |
| CVE-2020-1225 | 8.8 | Jun 9 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution… Affected: 2010; 2013; 2013; 2016 |
| CVE-2020-0906 | 8.8 | Apr 15 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution… Affected: 2010; 2013; 2013; 2016 |
| CVE-2020-0760 | 8.8 | Apr 15 | A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka 'Microsoft Office Remote Code Execution Vulnerability' Affected: 2010; 2013; 2016 |
| CVE-2020-0759 | 8.8 | Feb 11 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution… Affected: 2010; 2013; 2016; 2019 |
| CVE-2019-1331 | 8.8 | Oct 10 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution… Affected: 2010; 2013; 2013; 2016 |
| CVE-2019-1327 | 8.8 | Oct 10 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution… Affected: 2010; 2013; 2013; 2016; 2016; 2019; +1 more |
| CVE-2019-1111 | 8.8 | Jul 15 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution… Affected: 2010; 2013; 2013; 2016 |
| CVE-2019-1110 | 8.8 | Jul 15 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution… Affected: 2010; 2013; 2013; 2016 |
| CVE-2018-8502 | 8.8 | Oct 10 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in Protected View, aka "Microsoft Excel Remote Code… Affected: 2010; 2013; 2013; 2016 |
| CVE-2018-0796 | 8.8 | Jan 10 | Microsoft Excel in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way… Affected: 2007; 2010; 2013; 2013; 2016 |
| CVE-2017-8510 | 8.8 | Jun 15 | A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability" Affected: 2013 |
| CVE-2025-21362 | 8.4 | Jan 14 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-44822 | 8.2 | Jun 9 | Microsoft Excel Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2026-81948 | 7.8 | Sep 8 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-81950 | 7.8 | Sep 8 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-81949 | 7.8 | Sep 8 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-81953 | 7.8 | Sep 8 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-81959 | 7.8 | Sep 8 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-81951 | 7.8 | Sep 8 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-81388 | 7.8 | Sep 8 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-81957 | 7.8 | Sep 8 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-81960 | 7.8 | Sep 8 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-81956 | 7.8 | Sep 8 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-81397 | 7.8 | Sep 8 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-81396 | 7.8 | Sep 8 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-81954 | 7.8 | Sep 8 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-81947 | 7.8 | Sep 8 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-81386 | 7.8 | Sep 8 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-81398 | 7.8 | Sep 8 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-68817 | 7.8 | Aug 11 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-68814 | 7.8 | Aug 11 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2016; 2016 |
The 500 most important CVEs for this product (exploited first, then by severity)