← Back

Excel

excel

Vendor: Microsoft • 446 CVEs

CVEs (446)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2000-0597
1Microsoft
2Excel
Powerpoint
Apr 16, 2026
Jun 27, 2000
N/A· v4
N/A· v3
7.5 HIGH· v2
Microsoft Office 2000 (Excel and PowerPoint) and PowerPoint 97 are marked as safe for scripting, which allows remote attackers to force Internet Explorer or some email clients to save files to arbitrary locations via the...Show more
Microsoft Office 2000 (Excel and PowerPoint) and PowerPoint 97 are marked as safe for scripting, which allows remote attackers to force Internet Explorer or some email clients to save files to arbitrary locations via the Visual Basic for Applications (VBA) SaveAs function, aka the "Office HTML Script" vulnerability.Show less
CVE-2000-0419
1Microsoft
10Access
ExcelFrontpage+7 more
Apr 16, 2026
May 11, 2000
N/A· v4
N/A· v3
7.5 HIGH· v2
The Office 2000 UA ActiveX Control is marked as "safe for scripting," which allows remote attackers to conduct unauthorized activities via the "Show Me" function in Office Help, aka the "Office 2000 UA Control" vulnerabi...Show more
The Office 2000 UA ActiveX Control is marked as "safe for scripting," which allows remote attackers to conduct unauthorized activities via the "Show Me" function in Office Help, aka the "Office 2000 UA Control" vulnerability.Show less
CVE-2000-0277
1Microsoft
1Excel
Apr 16, 2026
Apr 3, 2000
N/A· v4
N/A· v3
7.2 HIGH· v2
Microsoft Excel 97 and 2000 does not warn the user when executing Excel Macro Language (XLM) macros in external text files, which could allow an attacker to execute a macro virus, aka the "XLM Text Macro" vulnerability.
CVE-1999-1055
1Microsoft
1Excel
Apr 16, 2026
Dec 31, 1999
N/A· v4
N/A· v3
7.5 HIGH· v2
Microsoft Excel 97 does not warn the user before executing worksheet functions, which could allow attackers to execute arbitrary commands by using the CALL function to execute a malicious DLL, aka the Excel "CALL Vulnera...Show more
Microsoft Excel 97 does not warn the user before executing worksheet functions, which could allow attackers to execute arbitrary commands by using the CALL function to execute a malicious DLL, aka the Excel "CALL Vulnerability."Show less
CVE-1999-0794
1Microsoft
1Excel
Apr 16, 2026
Oct 1, 1999
N/A· v4
N/A· v3
4.6 MEDIUM· v2
Microsoft Excel does not warn a user when a macro is present in a Symbolic Link (SYLK) format file.
CVE-1999-0717
1Microsoft
5Excel
Windows 2000Windows 95+2 more
Apr 16, 2026
May 7, 1999
N/A· v4
N/A· v3
2.6 LOW· v2
A remote attacker can disable the virus warning mechanism in Microsoft Excel 97.