Known vulnerabilities in Microsoft Excel - page 5

Vendor: Microsoft
Software: Microsoft Excel
Software CPE: cpe:2.3:a:microsoft:microsoft_excel:*:*:*:*:*:microsoft_office:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 337
Public exploits: 24
Known exploited (KEV): 13
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Excel Microsoft Excel is affected by 337 known vulnerabilities: 8 critical, 269 high, 34 medium, 26 low Critical High Medium Low

Vulnerabilities (337)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU121285 - Integer underflow
CVE-2026-20957		 CWE-191 High
No
No
 - 13.01.2026 SB20260113102
#VU121284 - Out-of-bounds read
CVE-2026-20946		 CWE-125 High
No
No
 - 13.01.2026 SB20260113102
#VU119489 - Untrusted Pointer Dereference
CVE-2025-62560		 CWE-822 High
No
No
 - 09.12.2025 SB2025120987
#VU119488 - Untrusted Pointer Dereference
CVE-2025-62556		 CWE-822 High
No
No
 - 09.12.2025 SB2025120987
#VU119487 - Use After Free
CVE-2025-62553		 CWE-416 High
No
No
 - 09.12.2025 SB2025120987
#VU119486 - Out-of-bounds read
CVE-2025-62564		 CWE-125 High
No
No
 - 09.12.2025 SB2025120987
#VU119485 - Use After Free
CVE-2025-62563		 CWE-416 High
No
No
 - 09.12.2025 SB2025120987
#VU119484 - Untrusted Pointer Dereference
CVE-2025-62561		 CWE-822 High
No
No
 - 09.12.2025 SB2025120987
#VU118329 - Out-of-bounds read
CVE-2025-60726		 CWE-125 Medium
No
No
 - 11.11.2025 SB2025111191
#VU118328 - Out-of-bounds read
CVE-2025-60727		 CWE-125 High
No
No
 - 11.11.2025 SB2025111191
#VU118326 - Exposure of sensitive information to an unauthorized actor
CVE-2025-59240		 CWE-200 Medium
No
No
 - 11.11.2025 SB2025111191
#VU118325 - Heap-based Buffer Overflow
CVE-2025-62201		 CWE-122 High
No
No
 - 11.11.2025 SB2025111191
#VU118324 - Out-of-bounds read
CVE-2025-62202		 CWE-125 Medium
No
No
 - 11.11.2025 SB2025111191
#VU118323 - Use After Free
CVE-2025-62203		 CWE-416 High
No
No
 - 11.11.2025 SB2025111191
#VU118322 - Untrusted Pointer Dereference
CVE-2025-62200		 CWE-822 High
No
No
 - 11.11.2025 SB2025111191
#VU117259 - Type confusion
CVE-2025-59231		 CWE-843 High
No
No
 - 15.10.2025 SB20251015108
#VU117256 - Type confusion
CVE-2025-59233		 CWE-843 High
No
No
 - 15.10.2025 SB20251015108
#VU117249 - Out-of-bounds read
CVE-2025-59235		 CWE-125 Medium
No
No
 - 15.10.2025 SB20251015108
#VU117245 - Use After Free
CVE-2025-59223		 CWE-416 High
No
No
 - 15.10.2025 SB20251015108
#VU117241 - Out-of-bounds read
CVE-2025-59232		 CWE-125 Medium
No
No
 - 15.10.2025 SB20251015108


Showing elements 81 - 100 out of 337