[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$foE33eDbiwydTVGR5OwSmTDo6gbzTzF5KI6WbiuL99kA":3,"g5a-family:microsoft\u002Fexcel":208,"g5a-ex:microsoft\u002Fexcel@*":226},{"success":4,"data":5},true,{"product":6,"versions":69,"topVulnerabilitiesByEpss":89,"kevVulnerabilities":146,"seoMetadata":187,"meta":206},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":68},"microsoft","excel",19,365,5,"2025-12-09",[14,19,21,24,27,30,33,36,39,42,44,48,51,54,56,58,60,63,66],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"16.83",1,0,false,{"version":20,"cve_count":17,"kev_count":17,"has_kev":18},"2.0",{"version":22,"cve_count":23,"kev_count":16,"has_kev":4},"2000",45,{"version":25,"cve_count":26,"kev_count":17,"has_kev":18},"2001",2,{"version":28,"cve_count":29,"kev_count":26,"has_kev":4},"2002",99,{"version":31,"cve_count":32,"kev_count":26,"has_kev":4},"2003",90,{"version":34,"cve_count":35,"kev_count":16,"has_kev":4},"2004",18,{"version":37,"cve_count":38,"kev_count":26,"has_kev":4},"2007",108,{"version":40,"cve_count":41,"kev_count":26,"has_kev":4},"2010",146,{"version":43,"cve_count":26,"kev_count":17,"has_kev":18},"2011",{"version":45,"cve_count":46,"kev_count":47,"has_kev":4},"2013",145,3,{"version":49,"cve_count":50,"kev_count":26,"has_kev":4},"2016",180,{"version":52,"cve_count":53,"kev_count":17,"has_kev":18},"2019",9,{"version":55,"cve_count":17,"kev_count":17,"has_kev":18},"3.0",{"version":57,"cve_count":17,"kev_count":17,"has_kev":18},"4.0",{"version":59,"cve_count":16,"kev_count":17,"has_kev":18},"95",{"version":61,"cve_count":62,"kev_count":17,"has_kev":18},"97",4,{"version":64,"cve_count":65,"kev_count":17,"has_kev":18},"x",14,{"version":67,"cve_count":16,"kev_count":17,"has_kev":18},"xp_sp3","Excel by Microsoft is a technology product with 19 tracked versions and 365 known security vulnerabilities including 5 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":17,"kev_count":17,"has_kev":18},{"version":22,"cve_count":23,"kev_count":16,"has_kev":4},{"version":25,"cve_count":26,"kev_count":17,"has_kev":18},{"version":28,"cve_count":29,"kev_count":26,"has_kev":4},{"version":31,"cve_count":32,"kev_count":26,"has_kev":4},{"version":34,"cve_count":35,"kev_count":16,"has_kev":4},{"version":37,"cve_count":38,"kev_count":26,"has_kev":4},{"version":40,"cve_count":41,"kev_count":26,"has_kev":4},{"version":43,"cve_count":26,"kev_count":17,"has_kev":18},{"version":45,"cve_count":46,"kev_count":47,"has_kev":4},{"version":49,"cve_count":50,"kev_count":26,"has_kev":4},{"version":52,"cve_count":53,"kev_count":17,"has_kev":18},{"version":55,"cve_count":17,"kev_count":17,"has_kev":18},{"version":57,"cve_count":17,"kev_count":17,"has_kev":18},{"version":59,"cve_count":16,"kev_count":17,"has_kev":18},{"version":61,"cve_count":62,"kev_count":17,"has_kev":18},{"version":64,"cve_count":65,"kev_count":17,"has_kev":18},{"version":67,"cve_count":16,"kev_count":17,"has_kev":18},[90,98,106,111,116,122,127,132,138,142],{"cveId":91,"description":92,"publishedDate":93,"cvssScore":94,"cvssVersion":95,"severity":96,"isKev":4,"epssScore":97},"CVE-2009-3129","Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer 2003 SP3; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote attackers to execute arbitrary code via a spreadsheet with a FEATHEADER record containing an invalid cbHdrData size element that affects a pointer offset, aka \"Excel Featheader Record Memory Corruption Vulnerability.\"","2009-11-11",7.8,"v3.1","High",0.84034,{"cveId":99,"description":100,"publishedDate":101,"cvssScore":102,"cvssVersion":103,"severity":104,"isKev":18,"epssScore":105},"CVE-2011-0105","Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac obtain a certain length value from an uninitialized memory location, which allows remote attackers to trigger a buffer overflow and execute arbitrary code via a crafted Excel file, aka \"Excel Data Initialization Vulnerability.\"","2011-04-13",9.3,"v2","Critical",0.70166,{"cveId":107,"description":108,"publishedDate":109,"cvssScore":102,"cvssVersion":103,"severity":104,"isKev":18,"epssScore":110},"CVE-2010-0822","Stack-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file with a crafted OBJ (0x5D) record, aka \"Excel Object Stack Overflow Vulnerability.\"","2010-06-08",0.70121,{"cveId":112,"description":113,"publishedDate":114,"cvssScore":94,"cvssVersion":95,"severity":96,"isKev":18,"epssScore":115},"CVE-2010-0258","Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet that causes memory to be interpreted as a different object type than intended, aka \"Microsoft Office Excel Sheet Object Type Confusion Vulnerability.\"","2010-03-10",0.6095,{"cveId":117,"description":118,"publishedDate":119,"cvssScore":120,"cvssVersion":95,"severity":104,"isKev":18,"epssScore":121},"CVE-2008-0081","Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via crafted macros, aka \"Macro Validation Vulnerability,\" a different vulnerability than CVE-2007-3490.","2008-01-16",9.8,0.57908,{"cveId":123,"description":124,"publishedDate":125,"cvssScore":94,"cvssVersion":95,"severity":96,"isKev":4,"epssScore":126},"CVE-2016-7262","Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Viewer allow user-assisted remote attackers to execute arbitrary commands via a crafted cell that is mishandled upon a click, aka \"Microsoft Office Security Feature Bypass Vulnerability.\"","2016-12-20",0.57733,{"cveId":128,"description":129,"publishedDate":130,"cvssScore":94,"cvssVersion":95,"severity":96,"isKev":18,"epssScore":131},"CVE-2023-36041","Microsoft Excel Remote Code Execution Vulnerability","2023-11-14",0.56727,{"cveId":133,"description":134,"publishedDate":135,"cvssScore":11,"cvssVersion":103,"severity":136,"isKev":18,"epssScore":137},"CVE-2002-1143","Microsoft Word and Excel allow remote attackers to steal sensitive information via certain field codes that insert the information when the document is returned to the attacker, as demonstrated in Word using (1) INCLUDETEXT or (2) INCLUDEPICTURE, aka \"Flaw in Word Fields and Excel External Updates Could Lead to Information Disclosure.\"","2003-04-11","Medium",0.53564,{"cveId":139,"description":129,"publishedDate":140,"cvssScore":94,"cvssVersion":95,"severity":96,"isKev":18,"epssScore":141},"CVE-2023-32029","2023-06-14",0.53513,{"cveId":143,"description":144,"publishedDate":101,"cvssScore":102,"cvssVersion":103,"severity":104,"isKev":18,"epssScore":145},"CVE-2011-0104","Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted HLink record in an Excel file, aka \"Excel Buffer Overwrite Vulnerability.\"",0.53431,[147,157,165,170,173,179],{"cveId":148,"description":149,"publishedDate":150,"cvssScore":151,"severity":96,"isKev":4,"epssScore":152,"cisaVulnName":153,"cisaDateAdded":154,"cisaShortDescription":155,"cisaRequiredAction":156},"CVE-2009-0238","Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1; Excel Viewer 2003 Gold and SP3; Excel Viewer; Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1; and Excel in Microsoft Office 2004 and 2008 for Mac allow remote attackers to execute arbitrary code via a crafted Excel document that triggers an access attempt on an invalid object, as exploited in the wild in February 2009 by Trojan.Mdropper.AC.","2009-02-25",8.8,0.43212,"Microsoft Office Remote Code Execution","2026-04-14","Microsoft Office Excel contains a remote code execution vulnerability that could allow an attacker to take complete control of an affected system if a user opens a specially crafted Excel file that includes a malformed object.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":158,"description":159,"publishedDate":160,"cvssScore":151,"severity":96,"isKev":4,"epssScore":161,"cisaVulnName":162,"cisaDateAdded":163,"cisaShortDescription":164,"cisaRequiredAction":156},"CVE-2007-0671","Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as demonstrated by Exploit-MSExcel.h in targeted zero-day attacks.","2007-02-03",0.43241,"Microsoft Office Excel Remote Code Execution Vulnerability","2025-08-12","Microsoft Office Excel contains a remote code execution vulnerability that can be exploited when a specially crafted Excel file is opened. This malicious file could be delivered as an email attachment or hosted on a malicious website. An attacker could leverage this vulnerability by creating a specially crafted Excel file, which, when opened, allowing an attacker to execute remote code on the affected system.",{"cveId":91,"description":92,"publishedDate":93,"cvssScore":94,"severity":96,"isKev":4,"epssScore":97,"cisaVulnName":166,"cisaDateAdded":167,"cisaShortDescription":168,"cisaRequiredAction":169},"Microsoft Excel Featheader Record Memory Corruption Vulnerability","2022-03-03","Microsoft Office Excel allows remote attackers to execute arbitrary code via a spreadsheet with a FEATHEADER record containing an invalid cbHdrData size element that affects a pointer offset.","Apply updates per vendor instructions.",{"cveId":123,"description":124,"publishedDate":125,"cvssScore":94,"severity":96,"isKev":4,"epssScore":126,"cisaVulnName":171,"cisaDateAdded":167,"cisaShortDescription":172,"cisaRequiredAction":169},"Microsoft Office Security Feature Bypass Vulnerability","A security feature bypass vulnerability exists when Microsoft Office improperly handles input. An attacker who successfully exploited the vulnerability could execute arbitrary commands.",{"cveId":174,"description":175,"publishedDate":176,"cvssScore":151,"severity":96,"isKev":4,"epssScore":177,"cisaVulnName":129,"cisaDateAdded":167,"cisaShortDescription":178,"cisaRequiredAction":169},"CVE-2019-1297","A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.","2019-09-11",0.21805,"A remote code execution vulnerability exists in Microsoft Excel when the software fails to properly handle objects in memory.",{"cveId":180,"description":181,"publishedDate":182,"cvssScore":94,"severity":96,"isKev":4,"epssScore":183,"cisaVulnName":184,"cisaDateAdded":185,"cisaShortDescription":186,"cisaRequiredAction":169},"CVE-2021-42292","Microsoft Excel Security Feature Bypass Vulnerability","2021-11-10",0.43005,"Microsoft Excel Security Feature Bypass","2021-11-17","A security feature bypass vulnerability in Microsoft Excel would allow a local user to perform arbitrary code execution.",{"title":188,"metaDescription":189,"keywords":190,"structuredData":191},"Excel by Microsoft - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Excel by Microsoft covering 19 versions with 365 tracked vulnerabilities including 0 critical and 6 high-severity issues and 5 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Excel vulnerabilities, Excel security, Excel CVE, Microsoft Excel, Excel threat intelligence, Microsoft security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Excel KEV, Excel exploited vulnerabilities",{"@context":192,"@type":193,"name":194,"description":189,"url":195,"manufacturer":196,"applicationCategory":200,"softwareVersion":201,"mainEntity":202},"https:\u002F\u002Fschema.org","SoftwareApplication","Excel","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fmicrosoft\u002Fexcel",{"@type":197,"name":198,"url":199},"Organization","Microsoft","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fmicrosoft","Security Software","19 versions tracked",{"@type":203,"name":204,"description":205,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Excel Security Vulnerabilities","Security vulnerabilities affecting Excel by Microsoft",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":207,"apiVersion":55},"2026-10-17T00:06:18.607Z",[209,212,215,218,220,222,224],{"product":210,"cves":211},"excel_viewer",125,{"product":213,"cves":214},"excel_for_mac",25,{"product":216,"cves":217},"excel_web_app",6,{"product":219,"cves":11},"excel_rt",{"product":221,"cves":62},"excel_services",{"product":223,"cves":26},"excel_2013_rt",{"product":225,"cves":16},"excel_mobile",{"rows":227,"total":217,"capped":18,"failed":17},[228,236,240,245,252,256],{"cveId":148,"name":153,"severity":96,"cvss":151,"added":154,"epss":152,"published":229,"ranges":230,"checked":4,"hits":235,"covers":18},"2009-02-25T16:30:00.343",[231,232,233,234],"2000-sp3","2002-sp3","2003-sp3","2007-sp1",[],{"cveId":158,"name":162,"severity":96,"cvss":151,"added":163,"epss":161,"published":237,"ranges":238,"checked":4,"hits":239,"covers":18},"2007-02-03T01:28:00",[22,28,31],[],{"cveId":91,"name":166,"severity":96,"cvss":94,"added":167,"epss":97,"published":241,"ranges":242,"checked":4,"hits":244,"covers":18},"2009-11-11T19:30:00.53",[232,233,234,243],"2007-sp2",[],{"cveId":123,"name":171,"severity":96,"cvss":94,"added":167,"epss":126,"published":246,"ranges":247,"checked":4,"hits":251,"covers":18},"2016-12-20T06:59:00.373",[248,249,250,49],"2007-sp3","2010-sp2","2013-sp1",[],{"cveId":174,"name":129,"severity":96,"cvss":151,"added":167,"epss":177,"published":253,"ranges":254,"checked":4,"hits":255,"covers":18},"2019-09-11T22:15:18.773",[249,250,49],[],{"cveId":180,"name":184,"severity":96,"cvss":94,"added":185,"epss":183,"published":257,"ranges":258,"checked":4,"hits":259,"covers":18},"2021-11-10T01:19:47.007",[250],[]]