Known vulnerabilities in Microsoft Excel 2013

Vendor: Microsoft
Software: Microsoft Excel
Version: 2013
Software CPE: cpe:2.3:a:microsoft:microsoft_excel:*:*:*:*:*:microsoft_office:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 108
Public exploits: 7
Known exploited (KEV): 2
Highest CVSSv4 Score: 8.7

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Microsoft Excel version 2013 Microsoft Excel 2013 is affected by 108 vulnerabilities: 1 critical, 85 high, 7 medium, 15 low Critical High Medium Low

Vulnerabilities (108)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU77260 - Improper input validation
CVE-2023-33133		 CWE-20 High
No
No
 16.0.16327.20324, 16.0.16501.20210 13.06.2023 SB2023061375
#VU73582 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2023-23398		 CWE-451 High
No
No
 - 14.03.2023 SB2023031456
#VU73573 - Improper input validation
CVE-2023-23399		 CWE-20 High
Public exploit available
No
 - 14.03.2023 SB2023031456
#VU60420 - Exposure of sensitive information to an unauthorized actor
CVE-2022-22716		 CWE-200 Low
No
No
 - 08.02.2022 SB2022020841
#VU59477 - Memory corruption
CVE-2022-21841		 CWE-119 High
No
No
 - 11.01.2022 SB2022011160
#VU59476 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-21840		 CWE-94 High
No
No
 - 11.01.2022 SB2022011159
#VU58907 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-43256		 CWE-94 High
No
No
 - 14.12.2021 SB2021121447
#VU58070 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-40442		 CWE-94 High
No
No
 - 09.11.2021 SB2021110941
#VU58058 - Improper input validation
CVE-2021-42292		 CWE-20 Critical
No
Exploited
 - 09.11.2021 SB2021110931
#VU57267 - Exposure of sensitive information to an unauthorized actor
CVE-2021-40472		 CWE-200 Low
No
No
 - 12.10.2021 SB2021101217
#VU57264 - Use After Free
CVE-2021-40474		 CWE-416 High
Public exploit available
No
 - 12.10.2021 SB2021101217
#VU57262 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-40485		 CWE-94 High
No
No
 - 12.10.2021 SB2021101217
#VU56573 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-38655		 CWE-94 High
No
No
 - 14.09.2021 SB2021091443
#VU56513 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-38660		 CWE-94 High
No
No
 - 14.09.2021 SB2021091423
#VU54805 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-34518		 CWE-94 High
No
No
 - 13.07.2021 SB2021071359
#VU54804 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-34501		 CWE-94 High
No
No
 - 13.07.2021 SB2021071359
#VU53912 - Use After Free
CVE-2021-31939		 CWE-416 High
Public exploit available
No
 - 08.06.2021 SB2021060831
#VU53112 - Out-of-bounds read
CVE-2021-31174		 CWE-125 Low
Public exploit available
No
 - 11.05.2021 SB2021051131
#VU53073 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-31179		 CWE-94 High
Public exploit available
No
 - 11.05.2021 SB2021051110
#VU53069 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-31175		 CWE-94 High
No
No
 - 11.05.2021 SB2021051110


Showing elements 1 - 20 out of 108