EX
Product
Excel
On CISA KEVExploited in the wild
502
CVEs
6
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 279Medium 59Low 1
Watch
Add Excel to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-2521 | – | Sep 9 | Microsoft Excel 2007 SP3, Excel 2010 SP2, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka… Affected: 2007; 2010; 2010 |
| CVE-2015-2520 | – | Sep 9 | Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel for Mac 2011 and 2016, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a… Affected: 2007; 2010; 2010; 2011; 2013; 2013; +1 more |
| CVE-2015-2423 | – | Aug 15 | Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Windows 10, Excel… Affected: 2007; 2010; 2013; 2013 |
| CVE-2015-2415 | – | Jul 14 | Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial… Affected: 2007; 2010; 2010; 2013; 2013 |
| CVE-2015-2378 | – | Jul 14 | Untrusted search path vulnerability in Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel Viewer 2007 SP3, and Office Compatibility Pack SP3 allows local users to gain privileges via… Affected: 2007; 2010; 2010 |
| CVE-2015-2377 | – | Jul 14 | Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial… Affected: 2007; 2010; 2010; 2013; 2013 |
| CVE-2015-2376 | – | Jul 14 | Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Office for Mac 2011, Excel Viewer 2007 SP3, Office Compatibility Pack SP3, Excel Services on… Affected: 2007; 2010; 2010; 2013; 2013 |
| CVE-2015-2375 | – | Jul 14 | Microsoft Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel Viewer 2007 SP3, Excel Services on SharePoint Server 2010 SP2, and Excel Services on SharePoint Server 2013 SP1… Affected: 2010; 2010; 2013; 2013 |
| CVE-2015-1682 | – | May 13 | Microsoft Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2, Office 2013 SP1, Excel 2013 SP1, PowerPoint 2013 SP1, Word 2013 SP1, Office 2013 RT SP1, Excel 2013… Affected: 2010; 2010; 2013 |
| CVE-2015-0097 | – | Mar 11 | Microsoft Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Excel 2010 SP2, PowerPoint 2010 SP2, and Word 2010 SP2 allow remote attackers to execute arbitrary code via a crafted… Affected: 2007; 2010; 2010 |
| CVE-2015-0085 | – | Mar 11 | Use-after-free vulnerability in Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2,… Affected: 2007; 2010; 2010 |
| CVE-2015-0063 | – | Feb 11 | Microsoft Excel 2007 SP3; the proofing tools in Office 2010 SP2; Excel 2010 SP2; Excel 2013 Gold, SP1, and RT; Excel Viewer; and Office Compatibility Pack SP3 allow remote… Affected: 2007; 2010; 2010; 2013; 2013 |
| CVE-2014-6361 | – | Dec 11 | Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 Gold and SP1, Excel 2013 RT Gold and SP1, and Office Compatibility Pack allow remote attackers to execute arbitrary code via a… Affected: 2007; 2010; 2010; 2013; 2013 |
| CVE-2014-6360 | – | Dec 11 | Microsoft Excel 2007 SP3, Excel 2010 SP2, and Office Compatibility Pack allow remote attackers to execute arbitrary code via a crafted Office document, aka "Global Free Remote… Affected: 2007; 2010; 2010 |
| CVE-2013-3890 | – | Oct 9 | Microsoft Excel 2007 SP3, Excel Viewer, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Excel… Affected: 2007 |
| CVE-2013-3889 | – | Oct 9 | Microsoft Excel 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office for Mac 2011; Excel Viewer; Office Compatibility Pack… Affected: 2010; 2010; 2013; 2013 |
| CVE-2013-3159 | – | Sep 11 | Microsoft Excel 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Excel Viewer; and Microsoft Office Compatibility Pack SP3 allow remote attackers to read arbitrary files via an XML… Affected: 2003; 2007; 2010; 2010; 2010; 2010 |
| CVE-2013-3158 | – | Sep 11 | Microsoft Excel 2003 SP3 and 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka… Affected: 2003; 2007 |
| CVE-2013-1315 | – | Sep 11 | Microsoft SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013; Office Web Apps 2010; Excel 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office for Mac 2011; Excel… Affected: 2003; 2007; 2010; 2010; 2010; 2013; +2 more |
| CVE-2012-2543 | – | Nov 14 | Stack-based buffer overflow in Microsoft Excel 2007 SP2 and SP3 and 2010 SP1; Office 2011 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 allows remote attackers… Affected: 2007; 2007; 2010; 2010 |
| CVE-2012-1887 | – | Nov 14 | Use-after-free vulnerability in Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1, and Office 2008 and 2011 for Mac, allows remote attackers to execute arbitrary code via a… Affected: 2003; 2007; 2007; 2010; 2010 |
| CVE-2012-1886 | – | Nov 14 | Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Excel Viewer; and Office Compatibility Pack SP2 and SP3 allow remote attackers to execute arbitrary code or cause a… Affected: 2003; 2007; 2007; 2010; 2010 |
| CVE-2012-1885 | – | Nov 14 | Heap-based buffer overflow in Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Office 2008 and 2011 for Mac; and Office Compatibility Pack SP2 and SP3 allows remote… Affected: 2003; 2007; 2007; 2010; 2010 |
| CVE-2012-5672 | – | Oct 25 | Microsoft Excel Viewer (aka Xlview.exe) and Excel in Microsoft Office 2007 (aka Office 12) allow remote attackers to cause a denial of service (read access violation and… Affected: 2007 |
| CVE-2012-1847 | – | May 9 | Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2008 and 2011 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 do not properly handle… Affected: 2003; 2007; 2007; 2010; 2010 |
| CVE-2012-0185 | – | May 9 | Heap-based buffer overflow in Microsoft Excel 2007 SP2 and SP3 and 2010 Gold and SP1, Excel Viewer, and Office Compatibility Pack SP2 and SP3 allows remote attackers to execute… Affected: 2007; 2007; 2010; 2010 |
| CVE-2012-0184 | – | May 9 | Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2008 and 2011 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 do not properly handle… Affected: 2003; 2007; 2007; 2010; 2010 |
| CVE-2012-0143 | – | May 9 | Microsoft Excel 2003 SP3 and Office 2008 for Mac do not properly handle memory during the opening of files, which allows remote attackers to execute arbitrary code via a crafted… Affected: 2003 |
| CVE-2012-0142 | – | May 9 | Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2008 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 do not properly handle memory… Affected: 2003; 2007; 2007; 2010; 2010 |
| CVE-2012-0141 | – | May 9 | Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2011 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 do not properly handle memory… Affected: 2003; 2007; 2007; 2010; 2010 |
| CVE-2011-3403 | – | Dec 14 | Microsoft Excel 2003 SP3 and Office 2004 for Mac do not properly handle objects in memory, which allows remote attackers to execute arbitrary code via a crafted Excel spreadsheet,… Affected: 2003 |
| CVE-2011-1990 | – | Sep 15 | Microsoft Excel 2007 SP2; Excel in Office 2007 SP2; Excel Viewer SP2; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; and Excel Services on Office… Affected: 2007 |
| CVE-2011-1989 | – | Sep 15 | Microsoft Excel 2003 SP3 and 2007 SP2; Excel in Office 2007 SP2; Excel 2010 Gold and SP1; Excel in Office 2010 Gold and SP1; Office 2004, 2008, and 2011 for Mac; Open XML File… Affected: 2003; 2007; 2010; 2010; 2010; 2010 |
| CVE-2011-1988 | – | Sep 15 | Microsoft Excel 2003 SP3 and 2007 SP2; Excel in Office 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility… Affected: 2003; 2007 |
| CVE-2011-1987 | – | Sep 15 | Array index error in Microsoft Excel 2003 SP3 and 2007 SP2; Excel in Office 2007 SP2; Excel 2010 Gold and SP1; Excel in Office 2010 Gold and SP1; Office 2004, 2008, and 2011 for… Affected: 2003; 2007; 2010; 2010; 2010; 2010 |
| CVE-2011-1986 | – | Sep 15 | Use-after-free vulnerability in Microsoft Excel 2003 SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Use after Free WriteAV… Affected: 2003 |
| CVE-2011-1279 | – | Jun 16 | Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information during parsing of Excel… Affected: 2002; 2003 |
| CVE-2011-1278 | – | Jun 16 | Microsoft Excel 2002 SP3 and Office 2004 for Mac do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute… Affected: 2002 |
| CVE-2011-1277 | – | Jun 16 | Microsoft Excel 2002 SP3, Office 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information during parsing of Excel spreadsheets, which… Affected: 2002 |
| CVE-2011-1276 | – | Jun 16 | Buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office… Affected: 2002; 2003; 2007 |
| CVE-2011-1275 | – | Jun 16 | Microsoft Excel 2002 SP3; Office 2004, 2008, and 2011 for Mac; and Open XML File Format Converter for Mac do not properly validate record information during parsing of Excel… Affected: 2002 |
| CVE-2011-1274 | – | Jun 16 | Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word,… Affected: 2002; 2003; 2007 |
| CVE-2011-1273 | – | Jun 16 | Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility… Affected: 2002; 2003; 2007; 2010; 2010 |
| CVE-2011-1272 | – | Jun 16 | Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word,… Affected: 2002; 2003; 2007 |
| CVE-2011-0104 | – | Apr 13 | Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code or cause a denial… Affected: 2002; 2003 |
| CVE-2011-0103 | – | Apr 13 | Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code or cause a denial… Affected: 2002; 2003 |
| CVE-2011-0101 | – | Apr 13 | Microsoft Excel 2002 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted RealTimeData record, related to a stTopic… Affected: 2002 |
| CVE-2011-0098 | – | Apr 13 | Integer signedness error in Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and… Affected: 2002; 2003; 2007; 2010 |
| CVE-2011-0097 | – | Apr 13 | Integer underflow in Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office… Affected: 2002; 2003; 2007; 2010 |
| CVE-2011-0105 | – | Apr 13 | Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac obtain a certain length value from an uninitialized memory location, which… Affected: 2002 |
The 500 most important CVEs for this product (exploited first, then by severity)