EX
Product
Excel
On CISA KEVExploited in the wild
502
CVEs
6
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 279Medium 59Low 1
Watch
Add Excel to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2011-0979 | – | Feb 10 | Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; and Excel Viewer SP2 do not properly handle… Affected: 2002; 2003; 2007; 2010 |
| CVE-2011-0978 | – | Feb 10 | Stack-based buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and… Affected: 2002; 2003; 2007 |
| CVE-2011-0977 | – | Feb 10 | Use-after-free vulnerability in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allows remote… Affected: 2007 |
| CVE-2011-0980 | – | Feb 10 | Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly parse Office Art objects, which allows remote… Affected: 2002; 2003; 2003 |
| CVE-2010-3242 | – | Oct 13 | Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information, which allows remote attackers to… Affected: 2002 |
| CVE-2010-3241 | – | Oct 13 | Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate binary file-format information, which allows remote… Affected: 2002 |
| CVE-2010-3240 | – | Oct 13 | Microsoft Excel 2002 SP3 and 2007 SP2; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 do not properly validate record… Affected: 2002; 2007 |
| CVE-2010-3239 | – | Oct 13 | Microsoft Excel 2002 SP3 does not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Extra Out of… Affected: 2002 |
| CVE-2010-3238 | – | Oct 13 | Microsoft Excel 2002 SP3 and 2003 SP3, and Office 2004 for Mac, does not properly validate binary file-format information, which allows remote attackers to execute arbitrary code… Affected: 2002; 2003 |
| CVE-2010-3237 | – | Oct 13 | Microsoft Excel 2002 SP3 and Office 2004 for Mac do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document,… Affected: 2002 |
| CVE-2010-3236 | – | Oct 13 | Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information, which allows remote… Affected: 2002; 2003 |
| CVE-2010-3235 | – | Oct 13 | Microsoft Excel 2002 SP3 does not properly validate formula information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Formula Biff… Affected: 2002 |
| CVE-2010-3234 | – | Oct 13 | Microsoft Excel 2002 SP3 does not properly validate formula information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Formula… Affected: 2002 |
| CVE-2010-3233 | – | Oct 13 | Microsoft Excel 2002 SP3 and 2003 SP3 does not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted .wk3 (aka Lotus 1-2-3… Affected: 2002; 2003 |
| CVE-2010-3232 | – | Oct 13 | Microsoft Excel 2003 SP3 and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and… Affected: 2003; 2007 |
| CVE-2010-3231 | – | Oct 13 | Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information, which allows remote attackers to… Affected: 2002 |
| CVE-2010-3230 | – | Oct 13 | Integer overflow in Microsoft Excel 2002 SP3 allows remote attackers to execute arbitrary code via an Excel document with crafted record information, aka "Excel Record Parsing… Affected: 2002 |
| CVE-2010-2562 | – | Aug 11 | Microsoft Office Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly parse the Excel file format, which allows… Affected: 2002; 2003 |
| CVE-2010-1253 | – | Jun 8 | Microsoft Office Excel 2002 SP3, 2007 SP1, and SP2; Office 2004 for mac; Office 2008 for Mac; Open XML File Format Converter for Mac; and Office Compatibility Pack for Word,… Affected: 2002; 2007; 2007 |
| CVE-2010-1252 | – | Jun 8 | Unspecified vulnerability in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Excel file, aka "Excel String… Affected: 2002 |
| CVE-2010-1251 | – | Jun 8 | Unspecified vulnerability in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Excel file, aka "Excel Record… Affected: 2002 |
| CVE-2010-1250 | – | Jun 8 | Heap-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to… Affected: 2002 |
| CVE-2010-1249 | – | Jun 8 | Buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute… Affected: 2002 |
| CVE-2010-1248 | – | Jun 8 | Buffer overflow in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via an Excel file with a malformed HFPicture (0x866)… Affected: 2002 |
| CVE-2010-1247 | – | Jun 8 | Unspecified vulnerability in Microsoft Office Excel 2002 SP3 allows remote attackers to execute arbitrary code via an Excel file with a malformed RTD (0x813) record that triggers… Affected: 2002 |
| CVE-2010-1246 | – | Jun 8 | Stack-based buffer overflow in Microsoft Office Excel 2002 SP3 allows remote attackers to execute arbitrary code via an Excel file with a malformed RTD (0x813) record, aka "Excel… Affected: 2002 |
| CVE-2010-1245 | – | Jun 8 | Unspecified vulnerability in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to… Affected: 2002 |
| CVE-2010-0824 | – | Jun 8 | Unspecified vulnerability in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via an Excel file with a malformed WOPT… Affected: 2002 |
| CVE-2010-0823 | – | Jun 8 | Unspecified vulnerability in Microsoft Office Excel 2002 SP3, 2003 SP3, 2007 SP1 and SP2; Office 2004 for mac; Office 2008 for Mac; Open XML File Format Converter for Mac; Office… Affected: 2002; 2003; 2007; 2007 |
| CVE-2010-0822 | – | Jun 8 | Stack-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to… Affected: 2002 |
| CVE-2010-0821 | – | Jun 8 | Unspecified vulnerability in Microsoft Office Excel 2002 SP3, 2003 SP3, 2007 SP1 and SP2; Office 2004 for mac; Office 2008 for Mac; Open XML File Format Converter for Mac; Office… Affected: 2002; 2003; 2007; 2007 |
| CVE-2010-0264 | – | Mar 10 | Microsoft Office Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly parse the Excel file format, which allows remote… Affected: 2002; 2003; 2007; 2007 |
| CVE-2010-0263 | – | Mar 10 | Microsoft Office Excel 2007 SP1 and SP2; Office 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer SP1 and SP2; Office Compatibility Pack for Word, Excel,… Affected: 2002; 2003; 2007; 2007 |
| CVE-2010-0262 | – | Mar 10 | Microsoft Office Excel 2007 SP1 and SP2 and Office 2004 for Mac do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted… Affected: 2002; 2003; 2007; 2007 |
| CVE-2010-0261 | – | Mar 10 | Heap-based buffer overflow in Microsoft Office Excel 2007 SP1 and SP2 and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote… Affected: 2002; 2003; 2007; 2007 |
| CVE-2010-0260 | – | Mar 10 | Heap-based buffer overflow in Microsoft Office Excel 2007 SP1 and SP2; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File… Affected: 2002; 2003; 2007; 2007 |
| CVE-2010-0257 | – | Mar 10 | Microsoft Office Excel 2002 SP3 does not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Microsoft… Affected: 2002; 2003; 2007; 2007 |
| CVE-2009-3134 | – | Nov 11 | Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer 2003 SP3; Office Excel… Affected: 2002; 2003; 2007; 2007 |
| CVE-2009-3133 | – | Nov 11 | Microsoft Office Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via a spreadsheet… Affected: 2002; 2003; 2007; 2007 |
| CVE-2009-3132 | – | Nov 11 | Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer 2003 SP3; Office Excel… Affected: 2002; 2003; 2007; 2007 |
| CVE-2009-3131 | – | Nov 11 | Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer 2003 SP3; Office Excel… Affected: 2002; 2003; 2007; 2007 |
| CVE-2009-3130 | – | Nov 11 | Heap-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute… Affected: 2002; 2003; 2007; 2007 |
| CVE-2009-3128 | – | Nov 11 | Microsoft Office Excel 2002 SP3 and 2003 SP3, and Office Excel Viewer 2003 SP3, does not properly parse the Excel file format, which allows remote attackers to execute arbitrary… Affected: 2002; 2003; 2007; 2007 |
| CVE-2009-3127 | – | Nov 11 | Microsoft Office Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, Open XML File Format Converter for Mac, and Office Excel Viewer 2003 SP3 do not properly parse the… Affected: 2002; 2003; 2007; 2007 |
| CVE-2008-4266 | – | Dec 10 | Array index vulnerability in Microsoft Office Excel 2000 SP3, 2002 SP3, and 2003 SP3; Excel Viewer 2003 Gold and SP3; Office 2004 and 2008 for Mac; and Open XML File Format… Affected: 2000; 2002; 2003 |
| CVE-2008-4019 | – | Oct 15 | Integer overflow in the REPT function in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1; Office Excel Viewer 2003 SP3; Office Excel Viewer; Office… Affected: 2003; 2003; 2007; 2007 |
| CVE-2008-3471 | – | Oct 15 | Stack-based buffer overflow in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1; Office Excel Viewer 2003 SP3; Office Excel Viewer; Office Compatibility… Affected: 2003; 2003; 2007; 2007 |
| CVE-2008-3068 | – | Jul 7 | Microsoft Crypto API 5.131.2600.2180 through 6.0, as used in Outlook, Windows Live Mail, and Office 2007, performs Certificate Revocation List (CRL) checks by using an arbitrary… Affected: 2003; 2007 |
| CVE-2008-0116 | – | Mar 11 | Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, Compatibility Pack, and Office 2004 and 2008 for Mac allows user-assisted remote attackers to execute arbitrary code via… Affected: 2000; 2002; 2003 |
| CVE-2008-0115 | – | Mar 11 | Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2007, Viewer 2003, Compatibility Pack, and Office for Mac 2004 allows user-assisted remote attackers to execute… Affected: 2000; 2002; 2003; 2007 |
The 500 most important CVEs for this product (exploited first, then by severity)