Excel Viewer vulnerabilities | LiveThreat CVE Feed

Product

Excel Viewer

by Microsoft · last CVE Mar 5, 2019

On CISA KEVExploited in the wild

125

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities125 In the news1 Timeline

Severity mix

Critical 1High 34Medium 9Low 0

Severity

All severities125 Critical1 High34 Medium9 Low0

Exploitation

On CISA KEV7 Exploited in the wild7

Watch

Add Excel Viewer to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2019-0541 In wildKEV	8.8	53%	Jan 8	Microsoft MSHTML Remote Code Execution Vulnerability Affected: 2007
CVE-2015-2424 In wildKEV	8.8	40%	Jul 14	Microsoft PowerPoint Memory Corruption Vulnerability Affected: 2007
CVE-2009-0238 In wildKEV	8.8	43%	Feb 25	Microsoft Office Remote Code Execution Affected: All versions, or not specified
CVE-2007-0671 In wildKEV	8.8	43%	Feb 3	Microsoft Office Excel Remote Code Execution Vulnerability Affected: 2003
CVE-2016-7262 In wildKEV	7.8	58%	Dec 20	Microsoft Office Security Feature Bypass Vulnerability Affected: All versions, or not specified
CVE-2013-3906 In wildKEV	7.8	85%	Nov 6	Microsoft Graphics Component Memory Corruption Vulnerability Affected: All versions, or not specified
CVE-2009-3129 In wildKEV	7.8	84%	Nov 11	Microsoft Excel Featheader Record Memory Corruption Vulnerability Affected: 2003
CVE-2008-0081	9.8	58%	Jan 16	Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via… Affected: 2003
CVE-2018-0796	8.8	23%	Jan 10	Microsoft Excel in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way… Affected: All versions, or not specified
CVE-2009-2502	8.1	22%	Oct 14	Buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002… Affected: 2003; 2003
CVE-2018-8577	7.8	19%	Nov 14	A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution… Affected: 2007
CVE-2018-8432	7.8	20%	Oct 10	A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphics Components Remote Code Execution… Affected: 2007
CVE-2018-8375	7.8	17%	Aug 15	A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution… Affected: 2007
CVE-2018-1029	7.8	21%	Apr 12	A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution… Affected: 2007
CVE-2017-11878	7.8	6%	Nov 15	Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2016,… Affected: 2007
CVE-2017-8631	7.8	17%	Sep 13	A remote code execution vulnerability exists in Excel Services, Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1,… Affected: 2007
CVE-2017-8501	7.8	23%	Jul 11	Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Memory Corruption Vulnerability" Affected: 2007
CVE-2017-0052	7.8	17%	Mar 17	Microsoft Office Compatibility Pack SP3, Excel 2007 SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3 allow remote attackers to execute arbitrary code or cause a… Affected: All versions, or not specified
CVE-2017-0006	7.8	17%	Mar 17	Microsoft Excel 2007 SP3, Office Compatibility Pack SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3 allow remote attackers to execute arbitrary code or cause a… Affected: All versions, or not specified
CVE-2016-7266	7.8	22%	Dec 20	Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, Excel Viewer, and Excel 2016 for Mac mishandle a registry… Affected: All versions, or not specified
CVE-2016-7231	7.8	19%	Nov 10	Microsoft Excel 2007 SP3, Excel for Mac 2011, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka… Affected: All versions, or not specified
CVE-2016-7229	7.8	19%	Nov 10	Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Office Compatibility Pack SP3, and Excel Viewer… Affected: All versions, or not specified
CVE-2016-3381	7.8	15%	Sep 14	Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute… Affected: All versions, or not specified
CVE-2016-3365	7.8	20%	Sep 14	Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, Excel Viewer, Excel Services on SharePoint Server 2007 SP3,… Affected: All versions, or not specified
CVE-2016-3363	7.8	20%	Sep 14	Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute… Affected: All versions, or not specified
CVE-2016-3362	7.8	17%	Sep 14	Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, Excel Viewer, Excel Services on SharePoint Server 2007 SP3,… Affected: All versions, or not specified
CVE-2016-3359	7.8	17%	Sep 14	Microsoft Excel 2007 SP3, Excel 2010 SP2, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft… Affected: All versions, or not specified
CVE-2016-3358	7.8	18%	Sep 14	Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel 2016 for Mac, Office Compatibility Pack SP3, Excel Viewer, Excel Services on… Affected: All versions, or not specified
CVE-2016-3284	7.8	20%	Jul 13	Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Office Compatibility Pack SP3, and Excel Viewer… Affected: All versions, or not specified
CVE-2016-0139	7.8	16%	Apr 12	Microsoft Excel 2010 SP2, Word for Mac 2011, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory… Affected: All versions, or not specified
CVE-2016-0122	7.8	39%	Apr 12	Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Word 2016 for Mac, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers… Affected: All versions, or not specified
CVE-2016-0054	7.8	16%	Feb 10	Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Office Compatibility Pack SP3, Excel Viewer, Excel… Affected: All versions, or not specified
CVE-2016-0035	7.8	22%	Jan 13	Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Office Compatibility Pack SP3, and Excel Viewer… Affected: All versions, or not specified
CVE-2016-7265	7.1	21%	Dec 20	Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, Excel Viewer, Excel Services on SharePoint Server 2007 SP3,… Affected: All versions, or not specified
CVE-2016-7264	7.1	23%	Dec 20	Microsoft Excel 2007 SP3, Office Compatibility Pack SP3, Excel Viewer, Excel for Mac 2011, and Excel 2016 for Mac allow remote attackers to obtain sensitive information from… Affected: All versions, or not specified
CVE-2019-0669	6.5	6%	Mar 5	An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosure Vulnerability' Affected: All versions, or not specified
CVE-2019-0540	5.5	13%	Mar 5	A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a victim a specially crafted file, which could trick the victim… Affected: All versions, or not specified
CVE-2018-8627	5.5	9%	Dec 12	An information disclosure vulnerability exists when Microsoft Excel software reads out of bound memory due to an uninitialized variable, which could disclose the contents of… Affected: 2007
CVE-2018-8427	5.5	2%	Oct 10	An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphics Components Information Disclosure… Affected: 2007
CVE-2018-8429	5.5	12%	Sep 13	An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability."… Affected: 2007
CVE-2018-8378	5.5	7%	Aug 15	An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of… Affected: 2007
CVE-2018-8382	5.5	13%	Aug 15	An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability."… Affected: 2007
CVE-2018-8246	5.5	19%	Jun 14	An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability."… Affected: All versions, or not specified
CVE-2017-11877	5.5	5%	Nov 15	Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2016,… Affected: 2007
CVE-2015-6177	–	14%	Dec 9	Microsoft Excel 2007 SP3, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office… Affected: All versions, or not specified
CVE-2015-6122	–	14%	Dec 9	Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel for Mac 2011, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office… Affected: All versions, or not specified
CVE-2015-6040	–	14%	Dec 9	Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel for Mac 2011, Excel 2016 for Mac, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code… Affected: All versions, or not specified
CVE-2015-6038	–	36%	Nov 11	Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Office Compatibility Pack SP3, Excel Viewer, and… Affected: All versions, or not specified
CVE-2015-2558	–	23%	Oct 14	Use-after-free vulnerability in Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Excel Viewer,… Affected: All versions, or not specified
CVE-2015-2523	–	30%	Sep 9	Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel for Mac 2011 and 2016, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to… Affected: All versions, or not specified