[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f4lc3vo9QoTvvPzCpupEOK0Ie_S2SZlz-c0smhoaCPsQ":3,"g5a-family:microsoft\u002Fexcel_viewer":138,"g5a-ex:microsoft\u002Fexcel_viewer@*":139},{"success":4,"data":5},true,{"product":6,"versions":21,"topVulnerabilitiesByEpss":24,"kevVulnerabilities":83,"seoMetadata":116,"meta":135},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":20},"microsoft","excel_viewer",2,125,6,"2019-03-05",[14,17],{"version":15,"cve_count":16,"kev_count":9,"has_kev":4},"2003",47,{"version":18,"cve_count":19,"kev_count":9,"has_kev":4},"2007",18,"Excel Viewer by Microsoft is a technology product with 2 tracked versions and 125 known security vulnerabilities including 6 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[22,23],{"version":15,"cve_count":16,"kev_count":9,"has_kev":4},{"version":18,"cve_count":19,"kev_count":9,"has_kev":4},[25,33,38,46,51,57,64,69,73,78],{"cveId":26,"description":27,"publishedDate":28,"cvssScore":29,"cvssVersion":30,"severity":31,"isKev":4,"epssScore":32},"CVE-2013-3906","GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2; Office 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Office Compatibility Pack SP3; and Lync 2010, 2010 Attendee, 2013, and Basic 2013 allows remote attackers to execute arbitrary code via a crafted TIFF image, as demonstrated by an image in a Word document, and exploited in the wild in October and November 2013.","2013-11-06",7.8,"v3.1","High",0.84853,{"cveId":34,"description":35,"publishedDate":36,"cvssScore":29,"cvssVersion":30,"severity":31,"isKev":4,"epssScore":37},"CVE-2009-3129","Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer 2003 SP3; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote attackers to execute arbitrary code via a spreadsheet with a FEATHEADER record containing an invalid cbHdrData size element that affects a pointer offset, aka \"Excel Featheader Record Memory Corruption Vulnerability.\"","2009-11-11",0.84034,{"cveId":39,"description":40,"publishedDate":41,"cvssScore":42,"cvssVersion":30,"severity":43,"isKev":44,"epssScore":45},"CVE-2008-0081","Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via crafted macros, aka \"Macro Validation Vulnerability,\" a different vulnerability than CVE-2007-3490.","2008-01-16",9.8,"Critical",false,0.57908,{"cveId":47,"description":48,"publishedDate":49,"cvssScore":29,"cvssVersion":30,"severity":31,"isKev":4,"epssScore":50},"CVE-2016-7262","Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Viewer allow user-assisted remote attackers to execute arbitrary commands via a crafted cell that is mishandled upon a click, aka \"Microsoft Office Security Feature Bypass Vulnerability.\"","2016-12-20",0.57733,{"cveId":52,"description":53,"publishedDate":54,"cvssScore":55,"cvssVersion":30,"severity":31,"isKev":4,"epssScore":56},"CVE-2019-0541","A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka \"MSHTML Engine Remote Code Execution Vulnerability.\" This affects Microsoft Office, Microsoft Office Word Viewer, Internet Explorer 9, Internet Explorer 11, Microsoft Excel Viewer, Internet Explorer 10, Office 365 ProPlus.","2019-01-08",8.8,0.53202,{"cveId":58,"description":59,"publishedDate":60,"cvssScore":61,"cvssVersion":62,"severity":43,"isKev":44,"epssScore":63},"CVE-2008-3471","Stack-based buffer overflow in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1; Office Excel Viewer 2003 SP3; Office Excel Viewer; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1; Office 2004 and 2008 for Mac; and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via a BIFF file with a malformed record that triggers a user-influenced size calculation, aka \"File Format Parsing Vulnerability.\"","2008-10-15",9.3,"v2",0.52318,{"cveId":65,"description":66,"publishedDate":67,"cvssScore":61,"cvssVersion":62,"severity":43,"isKev":44,"epssScore":68},"CVE-2008-0111","Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2007, Viewer 2003, Compatibility Pack, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via crafted data validation records, aka \"Excel Data Validation Record Vulnerability.\"","2008-03-11",0.50862,{"cveId":70,"description":71,"publishedDate":67,"cvssScore":61,"cvssVersion":62,"severity":43,"isKev":44,"epssScore":72},"CVE-2008-0116","Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, Compatibility Pack, and Office 2004 and 2008 for Mac allows user-assisted remote attackers to execute arbitrary code via malformed tags in rich text, aka \"Excel Rich Text Validation Vulnerability.\"",0.48229,{"cveId":74,"description":75,"publishedDate":76,"cvssScore":55,"cvssVersion":30,"severity":31,"isKev":4,"epssScore":77},"CVE-2007-0671","Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as demonstrated by Exploit-MSExcel.h in targeted zero-day attacks.","2007-02-03",0.43241,{"cveId":79,"description":80,"publishedDate":81,"cvssScore":55,"cvssVersion":30,"severity":31,"isKev":4,"epssScore":82},"CVE-2009-0238","Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1; Excel Viewer 2003 Gold and SP3; Excel Viewer; Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1; and Excel in Microsoft Office 2004 and 2008 for Mac allow remote attackers to execute arbitrary code via a crafted Excel document that triggers an access attempt on an invalid object, as exploited in the wild in February 2009 by Trojan.Mdropper.AC.","2009-02-25",0.42941,[84,89,93,98,101,108,112],{"cveId":79,"description":80,"publishedDate":81,"cvssScore":55,"severity":31,"isKev":4,"epssScore":82,"cisaVulnName":85,"cisaDateAdded":86,"cisaShortDescription":87,"cisaRequiredAction":88},"Microsoft Office Remote Code Execution","2026-04-14","Microsoft Office Excel contains a remote code execution vulnerability that could allow an attacker to take complete control of an affected system if a user opens a specially crafted Excel file that includes a malformed object.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":74,"description":75,"publishedDate":76,"cvssScore":55,"severity":31,"isKev":4,"epssScore":77,"cisaVulnName":90,"cisaDateAdded":91,"cisaShortDescription":92,"cisaRequiredAction":88},"Microsoft Office Excel Remote Code Execution Vulnerability","2025-08-12","Microsoft Office Excel contains a remote code execution vulnerability that can be exploited when a specially crafted Excel file is opened. This malicious file could be delivered as an email attachment or hosted on a malicious website. An attacker could leverage this vulnerability by creating a specially crafted Excel file, which, when opened, allowing an attacker to execute remote code on the affected system.",{"cveId":47,"description":48,"publishedDate":49,"cvssScore":29,"severity":31,"isKev":4,"epssScore":50,"cisaVulnName":94,"cisaDateAdded":95,"cisaShortDescription":96,"cisaRequiredAction":97},"Microsoft Office Security Feature Bypass Vulnerability","2022-03-03","A security feature bypass vulnerability exists when Microsoft Office improperly handles input. An attacker who successfully exploited the vulnerability could execute arbitrary commands.","Apply updates per vendor instructions.",{"cveId":34,"description":35,"publishedDate":36,"cvssScore":29,"severity":31,"isKev":4,"epssScore":37,"cisaVulnName":99,"cisaDateAdded":95,"cisaShortDescription":100,"cisaRequiredAction":97},"Microsoft Excel Featheader Record Memory Corruption Vulnerability","Microsoft Office Excel allows remote attackers to execute arbitrary code via a spreadsheet with a FEATHEADER record containing an invalid cbHdrData size element that affects a pointer offset.",{"cveId":102,"description":103,"publishedDate":104,"cvssScore":55,"severity":31,"isKev":4,"epssScore":105,"cisaVulnName":106,"cisaDateAdded":95,"cisaShortDescription":107,"cisaRequiredAction":97},"CVE-2015-2424","Microsoft PowerPoint 2007 SP3, Word 2007 SP3, PowerPoint 2010 SP2, Word 2010 SP2, PowerPoint 2013 SP1, Word 2013 SP1, and PowerPoint 2013 RT SP1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka \"Microsoft Office Memory Corruption Vulnerability.\"","2015-07-14",0.40388,"Microsoft PowerPoint Memory Corruption Vulnerability","Microsoft PowerPoint allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document.",{"cveId":26,"description":27,"publishedDate":28,"cvssScore":29,"severity":31,"isKev":4,"epssScore":32,"cisaVulnName":109,"cisaDateAdded":110,"cisaShortDescription":111,"cisaRequiredAction":97},"Microsoft Graphics Component Memory Corruption Vulnerability","2022-02-15","Microsoft Graphics Component contains a memory corruption vulnerability which can allow for remote code execution.",{"cveId":52,"description":53,"publishedDate":54,"cvssScore":55,"severity":31,"isKev":4,"epssScore":56,"cisaVulnName":113,"cisaDateAdded":114,"cisaShortDescription":115,"cisaRequiredAction":97},"Microsoft MSHTML Remote Code Execution Vulnerability","2021-11-03","Microsoft MSHTML engine contains an improper input validation vulnerability that allows for remote code execution vulnerability.",{"title":117,"metaDescription":118,"keywords":119,"structuredData":120},"Excel Viewer by Microsoft - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Excel Viewer by Microsoft covering 2 versions with 125 tracked vulnerabilities including 0 critical and 7 high-severity issues and 6 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Excel Viewer vulnerabilities, Excel Viewer security, Excel Viewer CVE, Microsoft Excel Viewer, Excel Viewer threat intelligence, Microsoft security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Excel Viewer KEV, Excel Viewer exploited vulnerabilities",{"@context":121,"@type":122,"name":123,"description":118,"url":124,"manufacturer":125,"applicationCategory":129,"softwareVersion":130,"mainEntity":131},"https:\u002F\u002Fschema.org","SoftwareApplication","Excel Viewer","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fmicrosoft\u002Fexcel_viewer",{"@type":126,"name":127,"url":128},"Organization","Microsoft","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fmicrosoft","Security Software","2 versions tracked",{"@type":132,"name":133,"description":134,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Excel Viewer Security Vulnerabilities","Security vulnerabilities affecting Excel Viewer by Microsoft",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":136,"apiVersion":137},"2026-10-17T21:26:03.130Z","3.0",[],{"rows":140,"total":172,"capped":44,"failed":173},[141,146,150,154,159,164,168],{"cveId":79,"name":85,"severity":31,"cvss":55,"added":86,"epss":82,"published":142,"ranges":143,"checked":4,"hits":145,"covers":44},"2009-02-25T16:30:00.343",[144],"all versions",[],{"cveId":74,"name":90,"severity":31,"cvss":55,"added":91,"epss":77,"published":147,"ranges":148,"checked":4,"hits":149,"covers":44},"2007-02-03T01:28:00",[15],[],{"cveId":47,"name":94,"severity":31,"cvss":29,"added":95,"epss":50,"published":151,"ranges":152,"checked":4,"hits":153,"covers":44},"2016-12-20T06:59:00.373",[],[],{"cveId":34,"name":99,"severity":31,"cvss":29,"added":95,"epss":37,"published":155,"ranges":156,"checked":4,"hits":158,"covers":44},"2009-11-11T19:30:00.53",[157],"2003-sp3",[],{"cveId":102,"name":106,"severity":31,"cvss":55,"added":95,"epss":105,"published":160,"ranges":161,"checked":4,"hits":163,"covers":44},"2015-07-14T21:59:35.987",[162],"2007-sp3",[],{"cveId":26,"name":109,"severity":31,"cvss":29,"added":110,"epss":32,"published":165,"ranges":166,"checked":4,"hits":167,"covers":44},"2013-11-06T15:55:05.86",[],[],{"cveId":52,"name":113,"severity":31,"cvss":55,"added":114,"epss":56,"published":169,"ranges":170,"checked":4,"hits":171,"covers":44},"2019-01-08T21:29:00.47",[162],[],7,0]