Microsoft Office Excel vulnerabilities
210 known CVE vulnerabilities in Microsoft Office Excel, translated and rated.
- CVE-2026-55048High
An integer overflow or wraparound vulnerability in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
- CVE-2026-55046Medium
An out-of-bounds read vulnerability in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
- CVE-2026-55044High
An out-of-bounds read vulnerability in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
- CVE-2026-55041High
A heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
- CVE-2026-55039High
An integer underflow vulnerability in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
- CVE-2026-55037High
A heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. The vulnerability can be exploited by opening a specially crafted Excel file.
- CVE-2026-55036High
A buffer over-read vulnerability in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
- CVE-2026-55031High
An out-of-bounds read vulnerability in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
- CVE-2026-55029High
A heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. The vulnerability can be triggered by opening a specially crafted file.
- CVE-2026-55025High
A type confusion vulnerability in Microsoft Office Excel allows an unauthorized attacker to execute code locally. The flaw is caused by accessing a resource using an incompatible data type.
- CVE-2026-55024High
A type confusion vulnerability in Microsoft Office Excel allows an unauthorized attacker to execute code locally. The flaw is caused by accessing a resource using an incompatible data type.
- CVE-2026-54131High
A Use-After-Free vulnerability in Microsoft Office Excel allows an unauthorized attacker to execute code locally. The issue stems from improper memory management when processing specially crafted Excel files.
- CVE-2026-50408Medium
An out-of-bounds read vulnerability in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
- CVE-2026-48580Medium
An untrusted pointer dereference vulnerability in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. This flaw can be exploited to read sensitive data from Excel files.
- CVE-2026-47642High
A Use-After-Free vulnerability in Microsoft Office Excel allows an unauthorized attacker to execute code locally. The issue stems from improper memory management when processing specially crafted Excel files.
- CVE-2026-58618High
A heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
- CVE-2026-55948High
A Use-After-Free vulnerability in Microsoft Office Excel allows an unauthorized attacker to execute code locally. The issue stems from improper memory management when processing specially crafted Excel files.
- CVE-2026-55899High
A stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
- CVE-2026-54988Medium
An out-of-bounds read vulnerability in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
- CVE-2026-50678Medium
A heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
- CVE-2026-50675High
A heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
- CVE-2026-45469High
Integer underflow (wrap or wraparound) vulnerability in Microsoft Office Excel. An unauthorized attacker can exploit this flaw to execute code locally.
- CVE-2026-45459Low
A protection mechanism failure in Microsoft Office Excel allows an unauthorized attacker to bypass a security feature locally.
- CVE-2026-45455Low
An out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
- CVE-2026-44823High
Numeric truncation error vulnerability in Microsoft Office Excel. An unauthorized attacker can exploit this flaw to execute code locally.
- CVE-2026-44822High
An out-of-bounds read vulnerability in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
- CVE-2026-44820High
Out-of-bounds read vulnerability in Microsoft Office Excel. An unauthorized attacker can exploit this flaw to execute code locally.
- CVE-2026-44818High
A race condition in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
- CVE-2026-44817High
Access of resource using incompatible type ('type confusion') vulnerability in Microsoft Office Excel. An unauthorized attacker can exploit this flaw to execute code locally.
- CVE-2026-40360High
An out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
- CVE-2026-40359High
A use after free vulnerability in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
- CVE-2025-62564High
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
- CVE-2025-62563High
A use after free vulnerability in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
- CVE-2025-62561High
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
- CVE-2025-62560High
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
- CVE-2025-62556High
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
- CVE-2025-62553High
A use after free vulnerability in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
- CVE-2025-62203High
A use-after-free vulnerability in Microsoft Office Excel allows an unauthenticated attacker to execute code locally. The flaw is triggered when the application processes specially crafted data.
- CVE-2025-62202High
An out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
- CVE-2025-62201High
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
- CVE-2025-62200High
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
- CVE-2025-60728Medium
An untrusted pointer dereference vulnerability exists in Microsoft Office Excel. An unauthorized attacker can disclose information over a network.
- CVE-2025-60727High
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. The flaw stems from improper bounds checking during memory access.
- CVE-2025-60726High
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
- CVE-2025-59240Medium
Exposure of sensitive information to an unauthorized actor in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
- CVE-2025-59243High
A use-after-free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
- CVE-2025-59236High
A use-after-free vulnerability in Microsoft Office Excel allows an unauthorized attacker to execute code locally. The issue stems from improper memory management while processing spreadsheet data.
- CVE-2025-59233High
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
- CVE-2025-59231High
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
- CVE-2025-59225High
A use-after-free vulnerability in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS