Known vulnerabilities in Microsoft Excel

Vendor: Microsoft
Software: Microsoft Excel
Software CPE: cpe:2.3:a:microsoft:microsoft_excel:*:*:*:*:*:microsoft_office:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 367
Public exploits: 24
Known exploited (KEV): 13
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Excel Microsoft Excel is affected by 367 known vulnerabilities: 8 critical, 286 high, 46 medium, 27 low Critical High Medium Low

Vulnerabilities (367)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU148297 - Integer overflow
CVE-2026-81949		 CWE-190 High
No
No
 16.0.5569.1003 09.09.2026 SB2026090916
#VU148296 - Heap-based Buffer Overflow
CVE-2026-81948		 CWE-122 High
No
No
 16.0.5569.1003 09.09.2026 SB2026090916
#VU148295 - Heap-based Buffer Overflow
CVE-2026-81947		 CWE-122 High
No
No
 16.0.5569.1003 09.09.2026 SB2026090916
#VU148294 - Type confusion
CVE-2026-81401		 CWE-843 Medium
No
No
 16.0.5569.1003 09.09.2026 SB2026090916
#VU148293 - Out-of-bounds read
CVE-2026-81400		 CWE-125 Medium
No
No
 16.0.5569.1003 09.09.2026 SB2026090916
#VU148292 - Buffer over-read
CVE-2026-81399		 CWE-126 Medium
No
No
 16.0.5569.1003 09.09.2026 SB2026090916
#VU148291 - Heap-based Buffer Overflow
CVE-2026-81398		 CWE-122 High
No
No
 16.0.5569.1003 09.09.2026 SB2026090916
#VU148290 - Heap-based Buffer Overflow
CVE-2026-81397		 CWE-122 High
No
No
 16.0.5569.1003 09.09.2026 SB2026090916
#VU148289 - Stack-based buffer overflow
CVE-2026-81396		 CWE-121 High
No
No
 16.0.5569.1003 09.09.2026 SB2026090916
#VU148288 - Out-of-bounds read
CVE-2026-81395		 CWE-125 Medium
No
No
 16.0.5569.1003 09.09.2026 SB2026090916
#VU148287 - Exposure of Sensitive System Information to an Unauthorized Control Sphere
CVE-2026-81394		 CWE-497 Medium
No
No
 16.0.5569.1003 09.09.2026 SB2026090916
#VU148286 - Out-of-bounds read
CVE-2026-81393		 CWE-125 Medium
No
No
 16.0.5569.1003 09.09.2026 SB2026090916
#VU148285 - Out-of-bounds read
CVE-2026-81392		 CWE-125 Medium
No
No
 16.0.5569.1003 09.09.2026 SB2026090916
#VU148284 - Use of Uninitialized Resource
CVE-2026-81391		 CWE-908 Medium
No
No
 16.0.5569.1003 09.09.2026 SB2026090916
#VU148283 - Out-of-bounds read
CVE-2026-81390		 CWE-125 Medium
No
No
 16.0.5569.1003 09.09.2026 SB2026090916
#VU148282 - Heap-based Buffer Overflow
CVE-2026-81389		 CWE-122 Medium
No
No
 16.0.5569.1003 09.09.2026 SB2026090916
#VU148281 - Stack-based buffer overflow
CVE-2026-81388		 CWE-121 High
No
No
 16.0.5569.1003 09.09.2026 SB2026090916
#VU148280 - Exposure of Sensitive System Information to an Unauthorized Control Sphere
CVE-2026-81387		 CWE-497 Low
No
No
 16.0.5569.1003 09.09.2026 SB2026090916
#VU148279 - Heap-based Buffer Overflow
CVE-2026-81386		 CWE-122 High
No
No
 16.0.5569.1003 09.09.2026 SB2026090916
#VU148236 - Out-of-bounds read
CVE-2026-78518		 CWE-125 High
No
No
 16.0.5569.1003 09.09.2026 SB2026090916


Showing elements 1 - 20 out of 367