Filtered by vendor Microsoft Subscriptions
Filtered by product Excel Subscriptions
Total 419 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-24081 1 Microsoft 11 365 Apps, Excel, Excel 2016 and 8 more 2026-02-13 7.8 High
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-26642 1 Microsoft 16 365 Apps, Access, Access 2016 and 13 more 2026-02-13 7.8 High
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-27750 1 Microsoft 10 365 Apps, Excel, Excel 2016 and 7 more 2026-02-13 7.8 High
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-27751 1 Microsoft 11 365 Apps, Excel, Excel 2016 and 8 more 2026-02-13 7.8 High
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-30381 1 Microsoft 11 365 Apps, Excel, Excel 2016 and 8 more 2026-02-13 7.8 High
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-30379 1 Microsoft 11 365 Apps, Excel, Excel 2016 and 8 more 2026-02-13 7.8 High
Release of invalid pointer or reference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-30377 1 Microsoft 11 365 Apps, Excel, Office and 8 more 2026-02-13 8.4 High
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-30376 1 Microsoft 11 365 Apps, Excel, Excel 2016 and 8 more 2026-02-13 7.8 High
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-29979 1 Microsoft 11 365 Apps, Excel, Office and 8 more 2026-02-13 7.8 High
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-29977 1 Microsoft 11 365 Apps, Excel, Excel 2016 and 8 more 2026-02-13 7.8 High
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-49711 1 Microsoft 11 365 Apps, Excel, Excel 2016 and 8 more 2026-02-13 7.8 High
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-48812 1 Microsoft 11 365 Apps, Excel, Excel 2016 and 8 more 2026-02-13 5.5 Medium
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2007-0671 1 Microsoft 14 Access, Excel, Excel Viewer and 11 more 2026-01-12 8.8 High
Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as demonstrated by Exploit-MSExcel.h in targeted zero-day attacks.
CVE-2023-33133 1 Microsoft 4 365 Apps, Excel, Office Long Term Servicing Channel and 1 more 2025-11-04 7.8 High
Microsoft Excel Remote Code Execution Vulnerability
CVE-2023-32029 1 Microsoft 5 365 Apps, Excel, Office and 2 more 2025-11-04 7.8 High
Microsoft Excel Remote Code Execution Vulnerability
CVE-2021-27059 1 Microsoft 2 Excel, Office 2025-10-30 7.6 High
Microsoft Office Remote Code Execution Vulnerability
CVE-2021-42292 1 Microsoft 4 365 Apps, Excel, Office and 1 more 2025-10-30 7.8 High
Microsoft Excel Security Feature Bypass Vulnerability
CVE-2023-36766 1 Microsoft 5 365 Apps, Excel, Office and 2 more 2025-10-30 7.8 High
Microsoft Excel Information Disclosure Vulnerability
CVE-2019-1297 1 Microsoft 3 Excel, Office, Office 365 Proplus 2025-10-29 8.8 High
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.
CVE-2009-3129 1 Microsoft 4 Excel, Excel Viewer, Office and 1 more 2025-10-22 7.8 High
Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer 2003 SP3; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote attackers to execute arbitrary code via a spreadsheet with a FEATHEADER record containing an invalid cbHdrData size element that affects a pointer offset, aka "Excel Featheader Record Memory Corruption Vulnerability."