EX
Product
Excel
On CISA KEVExploited in the wild
502
CVEs
6
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 279Medium 59Low 1
Watch
Add Excel to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2008-0114 | – | Mar 11 | Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office for Mac 2004 allows user-assisted remote attackers to execute arbitrary code via… Affected: 2000; 2002 |
| CVE-2008-0112 | – | Mar 11 | Unspecified vulnerability in Microsoft Excel 2000 SP3, and Office for Mac 2004 and 2008 allows user-assisted remote attackers to execute arbitrary code via a crafted .SLK file… Affected: 2000 |
| CVE-2008-0111 | – | Mar 11 | Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2007, Viewer 2003, Compatibility Pack, and Office 2004 for Mac allows user-assisted remote attackers to execute… Affected: 2000; 2002; 2003 |
| CVE-2008-0117 | – | Mar 11 | Unspecified vulnerability in Microsoft Excel 2000 SP3 and 2002 SP2, and Office 2004 and 2008 for Mac, allows user-assisted remote attackers to execute arbitrary code via crafted… Affected: 2000; 2002; 2003; 2007 |
| CVE-2007-3890 | – | Aug 14 | Microsoft Excel in Office 2000 SP3, Office XP SP3, Office 2003 SP2, and Office 2004 for Mac allows remote attackers to execute arbitrary code via a Workspace with a certain index… Affected: 2000; 2003; 2004; xp_sp3 |
| CVE-2007-3029 | – | Jul 10 | Unspecified vulnerability in Microsoft Excel 2002 SP3 and 2003 SP2 allows user-assisted remote attackers to execute arbitrary code via a malformed Excel file containing multiple… Affected: 2002; 2003 |
| CVE-2007-1756 | – | Jul 10 | Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2003 Viewer, and Office Excel 2007 does not properly validate version information, which allows user-assisted remote attackers to… Affected: 2000; 2002; 2003; 2007 |
| CVE-2007-3030 | – | Jul 10 | Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, and 2003 Viewer allows user-assisted remote attackers to execute arbitrary code via a malformed Excel file involving the "denoting… Affected: 2000; 2002; 2003; 2004; 2007 |
| CVE-2007-3490 | – | Jun 29 | Unspecified vulnerability in Microsoft Excel 2003 SP2 allows remote attackers to have an unknown impact via unspecified vectors, possibly related to the sheet name, as… Affected: 2003 |
| CVE-2007-1214 | – | May 8 | Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2003 Viewer, and 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a crafted AutoFilter filter record… Affected: 2000; 2002; 2003; 2004 |
| CVE-2007-1203 | – | May 8 | Unspecified vulnerability in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2003 Viewer, 2004 for Mac, and 2007 allows user-assisted remote attackers to execute arbitrary code via… Affected: 2000; 2002; 2003; 2004; 2007 |
| CVE-2007-0215 | – | May 8 | Stack-based buffer overflow in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, and 2003 Viewer allows user-assisted remote attackers to execute arbitrary code via a .XLS BIFF file… Affected: 2000; 2002; 2003; 2007 |
| CVE-2007-1239 | – | Mar 3 | Microsoft Excel 2003 does not properly parse .XLS files, which allows remote attackers to cause a denial of service (application crash) via a file with a (1) corrupted XML format… Affected: 2003; 2003; 2003 |
| CVE-2007-0031 | – | Jan 9 | Heap-based buffer overflow in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows user-assisted remote attackers to execute arbitrary code via a… Affected: 2000; 2002; 2003 |
| CVE-2007-0030 | – | Jan 9 | Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows user-assisted remote attackers to execute arbitrary code via an Excel file with an out-of-range… Affected: 2000; 2002; 2003 |
| CVE-2007-0029 | – | Jan 9 | Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows user-assisted remote attackers to execute arbitrary code via a malformed string, aka "Excel… Affected: 2000; 2002; 2003 |
| CVE-2007-0028 | – | Jan 9 | Microsoft Excel 2000, 2002, 2003, Viewer 2003, Office 2004 for Mac, and Office v.X for Mac does not properly handle certain opcodes, which allows user-assisted remote attackers to… Affected: 2000; 2002; 2003 |
| CVE-2007-0027 | – | Jan 9 | Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows remote attackers to execute arbitrary code via malformed IMDATA records that trigger memory… Affected: 2000; 2002; 2003 |
| CVE-2006-3875 | – | Oct 10 | Unspecified vulnerability in Microsoft Excel 2000, 2002, 2003, 2004 for Mac, v.X for Mac, and Excel Viewer 2003 allows user-assisted attackers to execute arbitrary code via a… Affected: 2000; 2002; 2003; 2004; x |
| CVE-2006-3867 | – | Oct 10 | Unspecified vulnerability in Microsoft Excel 2000, 2002, 2003, 2004 for Mac, v.X for Mac, and Excel Viewer 2003 allows user-assisted attackers to execute arbitrary code via a… Affected: 2000; 2002; 2003; 2004; x |
| CVE-2006-3877 | – | Oct 10 | Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office 2002, Office 2003, Office 2004 for Mac, and Office v.X for Mac allows user-assisted attackers to execute… Affected: 2000; 2002; 2003 |
| CVE-2006-1308 | – | Jul 13 | Unspecified vulnerability in Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted FNGROUPCOUNT value Affected: 2000; 2000; 2000; 2000; 2002; 2002; +6 more |
| CVE-2006-1301 | – | Jul 13 | Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted SELECTION record that triggers memory corruption, a… Affected: 2000; 2000; 2000; 2000; 2002; 2002; +6 more |
| CVE-2006-1309 | – | Jul 13 | Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted LABEL record that triggers memory corruption Affected: 2000; 2000; 2000; 2000; 2002; 2002; +6 more |
| CVE-2006-1306 | – | Jul 13 | Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted BIFF record with an attacker-controlled array index that… Affected: 2000; 2000; 2000; 2000; 2002; 2002; +6 more |
| CVE-2006-1304 | – | Jul 13 | Buffer overflow in Microsoft Excel 2000 through 2003 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted COLINFO record, which triggers the… Affected: 2000; 2000; 2000; 2000; 2002; 2002; +5 more |
| CVE-2006-1302 | – | Jul 13 | Buffer overflow in Microsoft Excel 2000 through 2003 allows user-assisted attackers to execute arbitrary code via a .xls file with certain crafted fields in a SELECTION record,… Affected: 2000; 2000; 2000; 2000; 2002; 2002; +6 more |
| CVE-2006-2388 | – | Jul 13 | Microsoft Office Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via malformed cell comments, which lead to modification of "critical data… Affected: 2000; 2000; 2000; 2000; 2002; 2002; +6 more |
| CVE-2006-3431 | – | Jul 7 | Buffer overflow in certain Asian language versions of Microsoft Excel might allow user-assisted attackers to execute arbitrary code via a crafted STYLE record in a spreadsheet… Affected: All versions, or not specified |
| CVE-2006-3014 | – | Jun 22 | Microsoft Excel allows user-assisted attackers to execute arbitrary javascript and redirect users to arbitrary sites via an Excel spreadsheet with an embedded Shockwave Flash… Affected: All versions, or not specified |
| CVE-2006-3059 | – | Jun 17 | Unspecified vulnerability in Microsoft Excel 2000 through 2004 allows remote user-assisted attackers to execute arbitrary code via unspecified vectors Affected: 2000; 2000; 2000; 2000; 2002; 2002; +5 more |
| CVE-2006-0029 | – | Mar 14 | Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an… Affected: 2000; 2002; 2003; 2004; x |
| CVE-2006-0030 | – | Mar 14 | Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an… Affected: 2000; 2002; 2003; 2004; x |
| CVE-2006-0028 | – | Mar 14 | Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via a… Affected: 2000; 2002; 2003; 2004; x |
| CVE-2005-4131 | – | Dec 9 | Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an… Affected: 95; 97; 97; 97; 2000; 2000; +8 more |
| CVE-2004-0846 | – | Nov 3 | Unknown vulnerability in Microsoft Excel 2000, 2002, 2001 for Mac, and v.X for Mac allows remote attackers to execute arbitrary code via a malicious file containing certain… Affected: 2000; 2001; 2002; x |
| CVE-2004-0200 | – | Sep 28 | Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code… Affected: 2002; 2003 |
| CVE-2002-1143 | – | Apr 11 | Microsoft Word and Excel allow remote attackers to steal sensitive information via certain field codes that insert the information when the document is returned to the attacker,… Affected: 2002; 2002; 2002 |
| CVE-2002-0618 | – | Aug 12 | The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code in the Local Computer zone by embedding HTML scripts within an Excel… Affected: 2000; 2000; 2000; 2002; 2002 |
| CVE-2002-0616 | – | Aug 12 | The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code by attaching an inline macro to an object within an Excel workbook,… Affected: 2000; 2000; 2000; 2002; 2002 |
| CVE-2002-0617 | – | Aug 12 | The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code by creating a hyperlink on a drawing shape in a source workbook that… Affected: 2000; 2000; 2000; 2002; 2002 |
| CVE-2002-0615 | – | Jul 3 | The Windows Media Active Playlist in Microsoft Windows Media Player 7.1 stores information in a well known location on the local file system, allowing attackers to execute HTML… Affected: 2000; 2000; 2000; 2002; 2002 |
| CVE-2002-0152 | – | Apr 22 | Buffer overflow in various Microsoft applications for Macintosh allows remote attackers to cause a denial of service (crash) or execute arbitrary code by invoking the file://… Affected: 2001; x |
| CVE-2001-0718 | – | Oct 30 | Vulnerability in (1) Microsoft Excel 2002 and earlier and (2) Microsoft PowerPoint 2002 and earlier allows attackers to bypass macro restrictions and execute arbitrary commands by… Affected: through 2002 |
| CVE-2000-0765 | – | Oct 20 | Buffer overflow in the HTML interpreter in Microsoft Office 2000 allows an attacker to execute arbitrary commands via a long embedded object tag, aka the "Microsoft Office HTML… Affected: 2000 |
| CVE-2000-0637 | – | Jul 26 | Microsoft Excel 97 and 2000 allows an attacker to execute arbitrary commands by specifying a malicious .dll using the Register.ID function, aka the "Excel REGISTER.ID Function"… Affected: 97; 2000 |
| CVE-2000-0597 | – | Jun 27 | Microsoft Office 2000 (Excel and PowerPoint) and PowerPoint 97 are marked as safe for scripting, which allows remote attackers to force Internet Explorer or some email clients to… Affected: 2000 |
| CVE-2000-0419 | – | May 11 | The Office 2000 UA ActiveX Control is marked as "safe for scripting," which allows remote attackers to conduct unauthorized activities via the "Show Me" function in Office Help,… Affected: 2000 |
| CVE-2000-0277 | – | Apr 3 | Microsoft Excel 97 and 2000 does not warn the user when executing Excel Macro Language (XLM) macros in external text files, which could allow an attacker to execute a macro virus,… Affected: 97; 2000 |
| CVE-1999-1055 | – | Dec 31 | Microsoft Excel 97 does not warn the user before executing worksheet functions, which could allow attackers to execute arbitrary commands by using the CALL function to execute a… Affected: 97 |
The 500 most important CVEs for this product (exploited first, then by severity)