Excel (Microsoft) - vulnerabilities (CVEs)

526 CVEs, 0 in the last 30 days, 120 known versions, newest CVE from 2026-09-08. Vendor: Microsoft.

CVEs of Excel

• CVE-2026-85875 - CVSS 5.5 (medium), 2026-09-08: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-81948 - CVSS 7.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81950 - CVSS 7.8 (high), 2026-09-08: Double free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81949 - CVSS 7.8 (high), 2026-09-08: Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81953 - CVSS 7.8 (high), 2026-09-08: Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81959 - CVSS 7.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81951 - CVSS 7.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81388 - CVSS 7.8 (high), 2026-09-08: Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81957 - CVSS 7.8 (high), 2026-09-08: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81395 - CVSS 5.5 (medium), 2026-09-08: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-81394 - CVSS 5.5 (medium), 2026-09-08: Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information…
• CVE-2026-81960 - CVSS 7.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81389 - CVSS 7 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81400 - CVSS 5.5 (medium), 2026-09-08: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-81956 - CVSS 7.8 (high), 2026-09-08: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81393 - CVSS 5.5 (medium), 2026-09-08: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-81397 - CVSS 7.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81392 - CVSS 5.5 (medium), 2026-09-08: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-81396 - CVSS 7.8 (high), 2026-09-08: Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81958 - CVSS 5.5 (medium), 2026-09-08: Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-81401 - CVSS 5.5 (medium), 2026-09-08: Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-81391 - CVSS 5.5 (medium), 2026-09-08: Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-81399 - CVSS 5.5 (medium), 2026-09-08: Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-81954 - CVSS 7.8 (high), 2026-09-08: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81390 - CVSS 5.5 (medium), 2026-09-08: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-81387 - CVSS 5.5 (medium), 2026-09-08: Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information…
• CVE-2026-81947 - CVSS 7.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81386 - CVSS 7.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81398 - CVSS 7.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-78518 - CVSS 8.8 (high), 2026-09-08: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-68817 - CVSS 7.8 (high), 2026-08-11: Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-68814 - CVSS 7.8 (high), 2026-08-11: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-68805 - CVSS 7.8 (high), 2026-08-11: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-68812 - CVSS 7.8 (high), 2026-08-11: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-68803 - CVSS 7.8 (high), 2026-08-11: Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-68804 - CVSS 7.8 (high), 2026-08-11: Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-68801 - CVSS 7.8 (high), 2026-08-11: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-68799 - CVSS 5.5 (medium), 2026-08-11: Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-68797 - CVSS 5.5 (medium), 2026-08-11: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-70328 - CVSS 6.5 (medium), 2026-08-11: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
• CVE-2026-70327 - CVSS 6.5 (medium), 2026-08-11: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
• CVE-2026-68816 - CVSS 7.8 (high), 2026-08-11: Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-68815 - CVSS 7.8 (high), 2026-08-11: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-68811 - CVSS 7.8 (high), 2026-08-11: Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-68810 - CVSS 7.8 (high), 2026-08-11: Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-68806 - CVSS 7.8 (high), 2026-08-11: Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-68808 - CVSS 5.5 (medium), 2026-08-11: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-68802 - CVSS 5.5 (medium), 2026-08-11: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-68807 - CVSS 7.8 (high), 2026-08-11: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-68800 - CVSS 7.8 (high), 2026-08-11: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-68795 - CVSS 7.8 (high), 2026-08-11: Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-68796 - CVSS 7.8 (high), 2026-08-11: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-68794 - CVSS 7.8 (high), 2026-08-11: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-68793 - CVSS 7.8 (high), 2026-08-11: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-65807 - CVSS 8.8 (high), 2026-08-11: Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-62870 - CVSS 8.8 (high), 2026-08-03: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-55949 - CVSS 7.8 (high), 2026-07-14: Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-55947 - CVSS 7.8 (high), 2026-07-14: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-55898 - CVSS 7.1 (high), 2026-07-14: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-55131 - CVSS 7.8 (high), 2026-07-14: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-55053 - CVSS 7.8 (high), 2026-07-14: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-55122 - CVSS 7.1 (high), 2026-07-14: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-55137 - CVSS 7.8 (high), 2026-07-14: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-55058 - CVSS 7.8 (high), 2026-07-14: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-55037 - CVSS 7.8 (high), 2026-07-14: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-55054 - CVSS 6.5 (medium), 2026-07-14: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
• CVE-2026-55044 - CVSS 7.8 (high), 2026-07-14: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-55036 - CVSS 7.8 (high), 2026-07-14: Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-55141 - CVSS 7.8 (high), 2026-07-14: Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-55136 - CVSS 7.8 (high), 2026-07-14: Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-55138 - CVSS 5.5 (medium), 2026-07-14: Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-55041 - CVSS 7.8 (high), 2026-07-14: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-55039 - CVSS 7.8 (high), 2026-07-14: Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-55029 - CVSS 7.8 (high), 2026-07-14: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-55048 - CVSS 7.8 (high), 2026-07-14: Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-55031 - CVSS 7.8 (high), 2026-07-14: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-55025 - CVSS 7.8 (high), 2026-07-14: Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-55046 - CVSS 5.5 (medium), 2026-07-14: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-55024 - CVSS 7.8 (high), 2026-07-14: Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-50408 - CVSS 5.5 (medium), 2026-07-14: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-48580 - CVSS 5.5 (medium), 2026-07-14: Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-58618 - CVSS 7.8 (high), 2026-07-14: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-55948 - CVSS 7.8 (high), 2026-07-14: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-55899 - CVSS 7.8 (high), 2026-07-14: Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-54988 - CVSS 6.1 (medium), 2026-07-14: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-50675 - CVSS 7.8 (high), 2026-07-14: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-50678 - CVSS 6.6 (medium), 2026-07-14: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-45649 - CVSS 7.1 (high), 2026-06-09: Improper access control in Office for Android allows an unauthorized attacker to perform spoofing locally.
• CVE-2026-45469 - CVSS 7.8 (high), 2026-06-09: Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-45455 - CVSS 4.3 (medium), 2026-06-09: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-44820 - CVSS 7.8 (high), 2026-06-09: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-44818 - CVSS 7 (high), 2026-06-09: Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Office Excel allows an unauthorized attacker to…
• CVE-2026-44823 - CVSS 7.8 (high), 2026-06-09: Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-44822 - CVSS 8.2 (high), 2026-06-09: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
• CVE-2026-44817 - CVSS 7.8 (high), 2026-06-09: Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-44812 - CVSS 7.8 (high), 2026-06-09: Integer overflow or wraparound in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.
• CVE-2026-44803 - CVSS 7.8 (high), 2026-06-09: Integer overflow or wraparound in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.
• CVE-2026-42832 - CVSS 7.7 (high), 2026-05-12: Improper access control in Microsoft Office allows an unauthorized attacker to perform spoofing locally.
• CVE-2026-41100 - CVSS 4.4 (medium), 2026-05-12: Improper access control in M365 Copilot allows an authorized attacker to perform spoofing locally.
• CVE-2026-40362 - CVSS 7.8 (high), 2026-05-12: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.