← Back

Excel

excel

Vendor: Microsoft • 502 CVEs

CVEs (502)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2010-3241
1Microsoft
3Excel
OfficeOpen Xml File Format Converter
Apr 29, 2026
Oct 13, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate binary file-format information, which allows remote attackers to execute arbitrary code via a cr...Show more
Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate binary file-format information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Out-of-Bounds Memory Write in Parsing Vulnerability."Show less
CVE-2010-3240
1Microsoft
3Excel
Excel ViewerOffice Compatibility Pack
Apr 29, 2026
Oct 13, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
Microsoft Excel 2002 SP3 and 2007 SP2; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 do not properly validate record information, which allows remote attackers to e...Show more
Microsoft Excel 2002 SP3 and 2007 SP2; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Real Time Data Array Record Vulnerability."Show less
CVE-2010-3239
1Microsoft
1Excel
Apr 29, 2026
Oct 13, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
Microsoft Excel 2002 SP3 does not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Extra Out of Boundary Record Parsing Vulnerability."
CVE-2010-3238
1Microsoft
2Excel
Office
Apr 29, 2026
Oct 13, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
Microsoft Excel 2002 SP3 and 2003 SP3, and Office 2004 for Mac, does not properly validate binary file-format information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Negati...Show more
Microsoft Excel 2002 SP3 and 2003 SP3, and Office 2004 for Mac, does not properly validate binary file-format information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Negative Future Function Vulnerability."Show less
CVE-2010-3237
1Microsoft
2Excel
Office
Apr 29, 2026
Oct 13, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
Microsoft Excel 2002 SP3 and Office 2004 for Mac do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Merge Cell Record Pointer Vulnerabi...Show more
Microsoft Excel 2002 SP3 and Office 2004 for Mac do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Merge Cell Record Pointer Vulnerability."Show less
CVE-2010-3236
1Microsoft
3Excel
OfficeOpen Xml File Format Converter
Apr 29, 2026
Oct 13, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information, which allows remote attackers to execute arbitrary code via a c...Show more
Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Out Of Bounds Array Vulnerability."Show less
CVE-2010-3235
1Microsoft
1Excel
Apr 29, 2026
Oct 13, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
Microsoft Excel 2002 SP3 does not properly validate formula information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Formula Biff Record Vulnerability."
CVE-2010-3234
1Microsoft
1Excel
Apr 29, 2026
Oct 13, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
Microsoft Excel 2002 SP3 does not properly validate formula information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Formula Substream Memory Corruption Vulnerability."
CVE-2010-3233
1Microsoft
1Excel
Apr 29, 2026
Oct 13, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
Microsoft Excel 2002 SP3 and 2003 SP3 does not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted .wk3 (aka Lotus 1-2-3 workbook) file, aka "Lotus 1-2-3 Workbook P...Show more
Microsoft Excel 2002 SP3 and 2003 SP3 does not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted .wk3 (aka Lotus 1-2-3 workbook) file, aka "Lotus 1-2-3 Workbook Parsing Vulnerability."Show less
CVE-2010-3232
1Microsoft
5Excel
Excel ViewerOffice+2 more
Apr 29, 2026
Oct 13, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
Microsoft Excel 2003 SP3 and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 do not pr...Show more
Microsoft Excel 2003 SP3 and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Excel File Format Parsing Vulnerability."Show less
CVE-2010-3231
1Microsoft
3Excel
OfficeOpen Xml File Format Converter
Apr 29, 2026
Oct 13, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel...Show more
Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Excel Record Parsing Memory Corruption Vulnerability."Show less
CVE-2010-3230
1Microsoft
1Excel
Apr 29, 2026
Oct 13, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
Integer overflow in Microsoft Excel 2002 SP3 allows remote attackers to execute arbitrary code via an Excel document with crafted record information, aka "Excel Record Parsing Integer Overflow Vulnerability."
CVE-2010-2562
1Microsoft
3Excel
OfficeOpen Xml File Format Converter
Apr 29, 2026
Aug 11, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
Microsoft Office Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code...Show more
Microsoft Office Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Excel file, aka "Excel Memory Corruption Vulnerability."Show less
CVE-2010-1253
1Microsoft
4Excel
OfficeOffice Compatibility Pack+1 more
Apr 29, 2026
Jun 8, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
Microsoft Office Excel 2002 SP3, 2007 SP1, and SP2; Office 2004 for mac; Office 2008 for Mac; Open XML File Format Converter for Mac; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 an...Show more
Microsoft Office Excel 2002 SP3, 2007 SP1, and SP2; Office 2004 for mac; Office 2008 for Mac; Open XML File Format Converter for Mac; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2; allows remote attackers to execute arbitrary code via an Excel file with crafted DBQueryExt records that allow a function call to a "user-controlled pointer," aka "Excel ADO Object Vulnerability."Show less
CVE-2010-1252
1Microsoft
2Excel
Office
Apr 29, 2026
Jun 8, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
Unspecified vulnerability in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Excel file, aka "Excel String Variable Vulnerability."
CVE-2010-1251
1Microsoft
2Excel
Office
Apr 29, 2026
Jun 8, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
Unspecified vulnerability in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Excel file, aka "Excel Record Stack Corruption Vulnerability."
CVE-2010-1250
1Microsoft
3Excel
OfficeOpen Xml File Format Converter
Apr 29, 2026
Jun 8, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
Heap-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file with...Show more
Heap-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file with malformed (1) EDG (0x88) and (2) Publisher (0x89) records, aka "Excel EDG Memory Corruption Vulnerability."Show less
CVE-2010-1249
1Microsoft
3Excel
OfficeOpen Xml File Format Converter
Apr 29, 2026
Jun 8, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
Buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file with a malforme...Show more
Buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file with a malformed ExternName (0x23) record, aka "Excel Memory Corruption Vulnerability," a different vulnerability than CVE-2010-0823 and CVE-2010-1247.Show less
CVE-2010-1248
1Microsoft
2Excel
Office
Apr 29, 2026
Jun 8, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
Buffer overflow in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via an Excel file with a malformed HFPicture (0x866) record, aka "Excel HFPicture Memory Corrup...Show more
Buffer overflow in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via an Excel file with a malformed HFPicture (0x866) record, aka "Excel HFPicture Memory Corruption Vulnerability."Show less
CVE-2010-1247
1Microsoft
1Excel
Apr 29, 2026
Jun 8, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
Unspecified vulnerability in Microsoft Office Excel 2002 SP3 allows remote attackers to execute arbitrary code via an Excel file with a malformed RTD (0x813) record that triggers heap corruption, aka "Excel Memory Corrup...Show more
Unspecified vulnerability in Microsoft Office Excel 2002 SP3 allows remote attackers to execute arbitrary code via an Excel file with a malformed RTD (0x813) record that triggers heap corruption, aka "Excel Memory Corruption Vulnerability," a different vulnerability than CVE-2010-0823 and CVE-2010-1249.Show less