EX
Product
Excel
On CISA KEVExploited in the wild
502
CVEs
6
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 279Medium 59Low 1
Watch
Add Excel to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-68797 | 5.5 | Aug 11 | Microsoft Excel Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2026-68808 | 5.5 | Aug 11 | Microsoft Excel Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2026-68802 | 5.5 | Aug 11 | Microsoft Excel Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2026-55138 | 5.5 | Jul 14 | Microsoft Excel Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2026-55046 | 5.5 | Jul 14 | Microsoft Excel Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2026-50408 | 5.5 | Jul 14 | Microsoft Excel Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2026-48580 | 5.5 | Jul 14 | Microsoft Excel Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2026-42832 | 5.5 | May 12 | Microsoft Office Spoofing Vulnerability Affected: before 16.0.19822.20190 |
| CVE-2026-21261 | 5.5 | Feb 10 | Microsoft Excel Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2026-21258 | 5.5 | Feb 10 | Microsoft Excel Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2025-59240 | 5.5 | Nov 11 | Microsoft Excel Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2025-54901 | 5.5 | Sep 9 | Microsoft Excel Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2025-48812 | 5.5 | Jul 8 | Microsoft Excel Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2025-21383 | 5.5 | Feb 11 | Microsoft Excel Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2023-36766 | 5.5 | Sep 12 | Microsoft Excel Information Disclosure Vulnerability Affected: 2013; 2013; 2016 |
| CVE-2022-41104 | 5.5 | Nov 9 | Microsoft Excel Security Feature Bypass Vulnerability Affected: 2013; 2013; 2016 |
| CVE-2022-22716 | 5.5 | Feb 9 | Microsoft Excel Information Disclosure Vulnerability Affected: 2013; 2013; 2013; 2016; 2016 |
| CVE-2021-40472 | 5.5 | Oct 13 | Microsoft Excel Information Disclosure Vulnerability Affected: 2016 |
| CVE-2021-31178 | 5.5 | May 11 | Microsoft Office Information Disclosure Vulnerability Affected: 2013; 2013; 2016 |
| CVE-2021-31174 | 5.5 | May 11 | Microsoft Excel Information Disclosure Vulnerability Affected: 2013; 2013; 2016 |
| CVE-2021-28456 | 5.5 | Apr 13 | Microsoft Excel Information Disclosure Vulnerability Affected: 2010; 2013; 2013; 2016 |
| CVE-2020-17126 | 5.5 | Dec 10 | Microsoft Excel Information Disclosure Vulnerability Affected: 2010; 2013; 2013; 2016 |
| CVE-2020-1224 | 5.5 | Sep 11 | <p>An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory Affected: 2010; 2013; 2013; 2016 |
| CVE-2020-1497 | 5.5 | Aug 17 | An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory Affected: 2010; 2013; 2013; 2016 |
| CVE-2019-1464 | 5.5 | Dec 10 | An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosure Vulnerability' Affected: 2010; 2013; 2016 |
| CVE-2019-1446 | 5.5 | Nov 12 | An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosure Vulnerability' Affected: 2010; 2013; 2013; 2016; 2016 |
| CVE-2019-1263 | 5.5 | Sep 11 | An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosure Vulnerability' Affected: 2010; 2013; 2013; 2016; 2019 |
| CVE-2018-8627 | 5.5 | Dec 12 | An information disclosure vulnerability exists when Microsoft Excel software reads out of bound memory due to an uninitialized variable, which could disclose the contents of… Affected: 2010; 2013; 2013; 2016 |
| CVE-2018-8429 | 5.5 | Sep 13 | An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability."… Affected: 2010; 2013; 2013; 2016 |
| CVE-2018-8382 | 5.5 | Aug 15 | An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability."… Affected: 2010; 2013; 2016; 2016 |
| CVE-2018-8246 | 5.5 | Jun 14 | An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability."… Affected: 2010; 2013; 2013; 2016 |
| CVE-2018-8163 | 5.5 | May 9 | An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability."… Affected: 2010; 2013; 2016 |
| CVE-2017-11877 | 5.5 | Nov 15 | Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2016,… Affected: 2007; 2010; 2013; 2013; 2016; 2016 |
| CVE-2017-0194 | 5.5 | Apr 12 | Microsoft Excel 2007 SP3, Microsoft Excel 2010 SP2, and Office Compatibility Pack SP2 allow remote attackers to obtain sensitive information from process memory via a crafted… Affected: 2007; 2010 |
| CVE-2016-7267 | 5.5 | Dec 20 | Microsoft Excel 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016 misparses file formats, which makes it easier for remote attackers to execute arbitrary code via a crafted document, aka… Affected: 2010; 2013; 2013; 2016 |
| CVE-2016-3279 | 5.5 | Jul 13 | Microsoft Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2, Excel 2013 SP1, PowerPoint 2013 SP1, Word 2013 SP1, Excel 2013 RT SP1, PowerPoint 2013 RT SP1, Word… Affected: 2010; 2013; 2016 |
| CVE-2018-8598 | 4.7 | Dec 12 | An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability."… Affected: 2010; 2013; 2013; 2016 |
| CVE-2017-0027 | 4.7 | Mar 17 | Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Services on SharePoint Server 2013 SP1 allow remote attackers to… Affected: 2007; 2010; 2013; 2016 |
| CVE-2026-45455 | 4.3 | Jun 9 | Microsoft Excel Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2016-0012 | 4.3 | Jan 13 | Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Visio 2010 SP2, Word 2010 SP2,… Affected: 2007; 2010; 2010; 2013; 2013; 2016 |
| CVE-2026-50678 | 3.3 | Jul 14 | Microsoft Excel Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2015-6177 | – | Dec 9 | Microsoft Excel 2007 SP3, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office… Affected: 2007 |
| CVE-2015-6122 | – | Dec 9 | Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel for Mac 2011, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office… Affected: 2007; 2010; 2010 |
| CVE-2015-6040 | – | Dec 9 | Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel for Mac 2011, Excel 2016 for Mac, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code… Affected: 2007; 2010; 2010 |
| CVE-2015-6094 | – | Nov 11 | Microsoft Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, and Excel Services on SharePoint Server 2013 SP1 allow remote… Affected: 2010; 2010; 2013; 2013; 2016 |
| CVE-2015-6038 | – | Nov 11 | Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Office Compatibility Pack SP3, Excel Viewer, and… Affected: 2007; 2010; 2010; 2013; 2013 |
| CVE-2015-2503 | – | Nov 11 | Microsoft Access 2007 SP3, Excel 2007 SP3, InfoPath 2007 SP3, OneNote 2007 SP3, PowerPoint 2007 SP3, Project 2007 SP3, Publisher 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Office… Affected: 2007; 2010; 2010; 2013; 2013; 2016 |
| CVE-2015-2558 | – | Oct 14 | Use-after-free vulnerability in Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Excel Viewer,… Affected: 2007; 2010; 2010; 2013; 2013; 2016 |
| CVE-2015-2555 | – | Oct 14 | Use-after-free vulnerability in Microsoft Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, and Excel Services on SharePoint… Affected: 2010; 2010; 2013; 2013 |
| CVE-2015-2523 | – | Sep 9 | Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel for Mac 2011 and 2016, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to… Affected: 2007; 2010; 2010; 2011; 2013; 2013; +1 more |
The 500 most important CVEs for this product (exploited first, then by severity)