Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Excel
(Microsoft)Repositories |
Unknown: This might be proprietary software. |
#Vulnerabilities | 323 |
Date | Id | Summary | Products | Score | Patch | Annotated |
---|---|---|---|---|---|---|
2021-09-15 | CVE-2021-38660 | Microsoft Office Graphics Remote Code Execution Vulnerability | Excel | 7.8 | ||
2021-11-10 | CVE-2021-40442 | Microsoft Excel Remote Code Execution Vulnerability | 365_apps, Excel, Office, Office_long_term_servicing_channel, Office_online_server, Office_web_apps_server, Sharepoint_enterprise_server | 7.8 | ||
2022-05-10 | CVE-2022-29110 | Microsoft Excel Remote Code Execution Vulnerability | Excel, Office_web_apps_server | 7.8 | ||
2022-06-15 | CVE-2022-30173 | Microsoft Excel Remote Code Execution Vulnerability | Excel, Office_web_apps_server | 7.8 | ||
2023-11-14 | CVE-2023-36037 | Microsoft Excel Security Feature Bypass Vulnerability | 365_apps, Excel, Office, Office_long_term_servicing_channel | 7.8 | ||
1999-05-07 | CVE-1999-0717 | A remote attacker can disable the virus warning mechanism in Microsoft Excel 97. | Excel, Windows_2000, Windows_95, Windows_98, Windows_nt | N/A | ||
1999-10-01 | CVE-1999-0794 | Microsoft Excel does not warn a user when a macro is present in a Symbolic Link (SYLK) format file. | Excel, Office | N/A | ||
2000-06-27 | CVE-2000-0597 | Microsoft Office 2000 (Excel and PowerPoint) and PowerPoint 97 are marked as safe for scripting, which allows remote attackers to force Internet Explorer or some email clients to save files to arbitrary locations via the Visual Basic for Applications (VBA) SaveAs function, aka the "Office HTML Script" vulnerability. | Excel, Powerpoint | N/A | ||
2000-07-26 | CVE-2000-0637 | Microsoft Excel 97 and 2000 allows an attacker to execute arbitrary commands by specifying a malicious .dll using the Register.ID function, aka the "Excel REGISTER.ID Function" vulnerability. | Excel | N/A | ||
2002-08-12 | CVE-2002-0618 | The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code in the Local Computer zone by embedding HTML scripts within an Excel workbook that contains an XSL stylesheet, aka "Excel XSL Stylesheet Script Execution". | Excel, Office | N/A |