EX
Product
Excel
On CISA KEVExploited in the wild
502
CVEs
6
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 279Medium 59Low 1
Watch
Add Excel to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-1714 | 7.8 | Jan 12 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2010; 2013; 2016 |
| CVE-2021-1713 | 7.8 | Jan 12 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2010; 2013; 2016 |
| CVE-2020-17129 | 7.8 | Dec 10 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2010; 2013; 2013; 2016 |
| CVE-2020-17128 | 7.8 | Dec 10 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2010; 2013; 2013; 2016 |
| CVE-2020-17127 | 7.8 | Dec 10 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2010 |
| CVE-2020-17125 | 7.8 | Dec 10 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2010; 2013; 2013; 2016 |
| CVE-2020-17123 | 7.8 | Dec 10 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2010; 2013; 2013; 2016; 2019; 2019 |
| CVE-2020-17067 | 7.8 | Nov 11 | Microsoft Excel Security Feature Bypass Vulnerability Affected: 2010; 2013; 2013; 2016 |
| CVE-2020-17066 | 7.8 | Nov 11 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2010 |
| CVE-2020-17065 | 7.8 | Nov 11 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2010; 2013; 2013; 2016 |
| CVE-2020-17064 | 7.8 | Nov 11 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2010; 2013; 2013; 2016 |
| CVE-2020-16932 | 7.8 | Oct 16 | <p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory Affected: 2010; 2013; 2013; 2016 |
| CVE-2020-16931 | 7.8 | Oct 16 | <p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory Affected: 2010; 2013; 2013; 2016 |
| CVE-2020-16929 | 7.8 | Oct 16 | <p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory Affected: 2010; 2013; 2013; 2016 |
| CVE-2020-1594 | 7.8 | Sep 11 | <p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory Affected: 2010; 2013; 2013; 2016 |
| CVE-2020-1335 | 7.8 | Sep 11 | <p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory Affected: 2010; 2013; 2013; 2016 |
| CVE-2020-1332 | 7.8 | Sep 11 | <p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory Affected: 2010; 2013; 2013; 2016 |
| CVE-2020-0652 | 7.8 | Jan 14 | A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka 'Microsoft Office Memory Corruption… Affected: 2010; 2013; 2013; 2016; 2019 |
| CVE-2020-0651 | 7.8 | Jan 14 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution… Affected: 2010; 2013; 2013; 2016; 2016; 2019; +1 more |
| CVE-2020-0650 | 7.8 | Jan 14 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution… Affected: 2010; 2013; 2013; 2016; 2016; 2019; +1 more |
| CVE-2019-1448 | 7.8 | Nov 12 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution… Affected: 2010; 2013; 2013; 2016 |
| CVE-2019-0828 | 7.8 | Apr 9 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution… Affected: 2010; 2013; 2013; 2016; 2016; 2019; +1 more |
| CVE-2018-8636 | 7.8 | Dec 12 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution… Affected: 2010; 2013; 2013; 2016; 2019 |
| CVE-2018-8597 | 7.8 | Dec 12 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution… Affected: 2010; 2013; 2013; 2016 |
| CVE-2018-8577 | 7.8 | Nov 14 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution… Affected: 2010; 2013; 2013; 2016 |
| CVE-2018-8331 | 7.8 | Sep 13 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution… Affected: All versions, or not specified |
| CVE-2018-8375 | 7.8 | Aug 15 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution… Affected: 2010; 2013; 2013; 2016; 2016 |
| CVE-2018-8379 | 7.8 | Aug 15 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution… Affected: 2010; 2013; 2016; 2016 |
| CVE-2018-8162 | 7.8 | May 9 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution… Affected: 2010; 2013; 2016 |
| CVE-2018-8148 | 7.8 | May 9 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution… Affected: 2010; 2013; 2016 |
| CVE-2018-8147 | 7.8 | May 9 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution… Affected: 2010; 2013; 2016 |
| CVE-2018-1029 | 7.8 | Apr 12 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution… Affected: 2007; 2010; 2013; 2013; 2016; 2016; +1 more |
| CVE-2018-1027 | 7.8 | Apr 12 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution… Affected: 2007; 2010; 2013; 2013 |
| CVE-2018-1011 | 7.8 | Apr 12 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution… Affected: 2010; 2013 |
| CVE-2018-0920 | 7.8 | Apr 12 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution… Affected: 2010 |
| CVE-2018-0907 | 7.8 | Mar 14 | Microsoft Excel 2007 SP3, Microsoft Excel 2010 SP2, Microsoft Excel 2013 SP1, Microsoft Excel 2016, Microsoft Office 2016 Click-to-Run and Microsoft Office 2016 for Mac allow a… Affected: 2007; 2007; 2013; 2016 |
| CVE-2017-11884 | 7.8 | Nov 15 | Microsoft Excel 2016 Click-to-Run (C2R) allows an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory, aka "Microsoft… Affected: 2016 |
| CVE-2017-11878 | 7.8 | Nov 15 | Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2016,… Affected: 2007; 2010; 2013; 2013; 2016 |
| CVE-2017-8632 | 7.8 | Sep 13 | A remote code execution vulnerability exists in Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel… Affected: 2010; 2013; 2013; 2016 |
| CVE-2017-8631 | 7.8 | Sep 13 | A remote code execution vulnerability exists in Excel Services, Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1,… Affected: 2007; 2010; 2013; 2013; 2016 |
| CVE-2017-8502 | 7.8 | Jul 11 | Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Memory Corruption Vulnerability" Affected: 2010; 2013; 2013; 2016 |
| CVE-2017-8501 | 7.8 | Jul 11 | Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Memory Corruption Vulnerability" Affected: 2007; 2010; 2013; 2013; 2016 |
| CVE-2017-0052 | 7.8 | Mar 17 | Microsoft Office Compatibility Pack SP3, Excel 2007 SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3 allow remote attackers to execute arbitrary code or cause a… Affected: 2007 |
| CVE-2017-0020 | 7.8 | Mar 17 | Microsoft Excel 2016, Excel 2010 SP2, Excel 2013 RT SP1, and Office Web Apps Server 2013 SP1 allow remote attackers to execute arbitrary code or cause a denial of service (memory… Affected: 2010; 2013; 2016 |
| CVE-2017-0006 | 7.8 | Mar 17 | Microsoft Excel 2007 SP3, Office Compatibility Pack SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3 allow remote attackers to execute arbitrary code or cause a… Affected: 2007 |
| CVE-2016-7266 | 7.8 | Dec 20 | Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, Excel Viewer, and Excel 2016 for Mac mishandle a registry… Affected: 2007; 2010; 2013; 2013; 2016 |
| CVE-2016-7236 | 7.8 | Nov 10 | Microsoft Excel 2010 SP2, Excel for Mac 2011, Excel 2016 for Mac, and Excel Services on SharePoint Server 2010 SP2 allow remote attackers to execute arbitrary code via a crafted… Affected: 2010 |
| CVE-2016-7231 | 7.8 | Nov 10 | Microsoft Excel 2007 SP3, Excel for Mac 2011, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka… Affected: 2007 |
| CVE-2016-7229 | 7.8 | Nov 10 | Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Office Compatibility Pack SP3, and Excel Viewer… Affected: 2007; 2010; 2013; 2013; 2016 |
| CVE-2016-7228 | 7.8 | Nov 10 | Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, and Office Compatibility Pack SP3 allow remote… Affected: 2007; 2010; 2013; 2013; 2016 |
The 500 most important CVEs for this product (exploited first, then by severity)