← Back

Excel Viewer

excel_viewer

Vendor: Microsoft • 125 CVEs

CVEs (125)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Microsoft
2Excel
Excel Viewer
Apr 16, 2026
Jul 13, 2006
N/A· v4
N/A· v3
9.3 HIGH· v2
Microsoft Office Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via malformed cell comments, which lead to modification of "critical data offsets" during the rebuilding process.
1Microsoft
2Excel
Excel Viewer
Apr 16, 2026
Jul 13, 2006
N/A· v4
N/A· v3
9.3 HIGH· v2
Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted BIFF record with an attacker-controlled array index that is used for a function pointer, aka "Malf...Show more
Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted BIFF record with an attacker-controlled array index that is used for a function pointer, aka "Malformed OBJECT record Vulnerability."Show less
1Microsoft
2Excel
Excel Viewer
Apr 16, 2026
Jul 13, 2006
N/A· v4
N/A· v3
9.3 HIGH· v2
Buffer overflow in Microsoft Excel 2000 through 2003 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted COLINFO record, which triggers the overflow during a "data filling operation."
1Microsoft
2Excel
Excel Viewer
Apr 16, 2026
Jul 13, 2006
N/A· v4
N/A· v3
9.3 HIGH· v2
Buffer overflow in Microsoft Excel 2000 through 2003 allows user-assisted attackers to execute arbitrary code via a .xls file with certain crafted fields in a SELECTION record, which triggers memory corruption, aka "Malf...Show more
Buffer overflow in Microsoft Excel 2000 through 2003 allows user-assisted attackers to execute arbitrary code via a .xls file with certain crafted fields in a SELECTION record, which triggers memory corruption, aka "Malformed SELECTION record Vulnerability."Show less
1Microsoft
2Excel
Excel Viewer
Apr 16, 2026
Jun 17, 2006
N/A· v4
N/A· v3
9.3 HIGH· v2
Unspecified vulnerability in Microsoft Excel 2000 through 2004 allows remote user-assisted attackers to execute arbitrary code via unspecified vectors. NOTE: this is a different vulnerability than CVE-2006-3086.