Known vulnerabilities in Microsoft Excel - page 6

Vendor: Microsoft
Software CPE: cpe:2.3:a:microsoft:microsoft_excel:*:*:*:*:*:microsoft_office:*:*
Total vulnerabilities: 367
Public exploits: 24
Known exploited (KEV): 13
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Excel Microsoft Excel is affected by 367 known vulnerabilities: 8 critical, 286 high, 46 medium, 27 low Critical High Medium Low

Vulnerabilities (367)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU126257 - Use After Free
CVE-2026-32197
CWE-416 High
No
No
- 16.04.2026 SB2026041615
#VU126256 - Use After Free
CVE-2026-32189
CWE-416 High
No
No
- 16.04.2026 SB2026041615
#VU123802 - Use After Free
CVE-2026-26107
CWE-416 High
No
No
16.0.5543.1000 11.03.2026 SB2026031105
#VU123799 - Heap-based Buffer Overflow
CVE-2026-26108
CWE-122 High
No
No
16.0.5543.1000 11.03.2026 SB2026031105
#VU123796 - Out-of-bounds read
CVE-2026-26109
CWE-125 High
No
No
16.0.5543.1000 11.03.2026 SB2026031105
#VU123788 - Untrusted Pointer Dereference
CVE-2026-26112
CWE-822 High
No
No
16.0.5543.1000 11.03.2026 SB2026031105
#VU122585 - Out-of-bounds read
CVE-2026-21261
CWE-125 Medium
No
No
- 10.02.2026 SB2026021092
#VU122584 - Out-of-bounds read
CVE-2026-21258
CWE-125 Medium
No
No
- 10.02.2026 SB2026021092
#VU122583 - Heap-based Buffer Overflow
CVE-2026-21259
CWE-122 High
No
No
- 10.02.2026 SB2026021092
#VU121287 - Use After Free
CVE-2026-20950
CWE-416 High
No
No
- 13.01.2026 SB20260113102
#VU121285 - Integer underflow
CVE-2026-20957
CWE-191 High
No
No
- 13.01.2026 SB20260113102
#VU121284 - Out-of-bounds read
CVE-2026-20946
CWE-125 High
No
No
- 13.01.2026 SB20260113102
#VU119489 - Untrusted Pointer Dereference
CVE-2025-62560
CWE-822 High
No
No
- 09.12.2025 SB2025120987
#VU119488 - Untrusted Pointer Dereference
CVE-2025-62556
CWE-822 High
No
No
- 09.12.2025 SB2025120987
#VU119487 - Use After Free
CVE-2025-62553
CWE-416 High
No
No
- 09.12.2025 SB2025120987
#VU119486 - Out-of-bounds read
CVE-2025-62564
CWE-125 High
No
No
- 09.12.2025 SB2025120987
#VU119485 - Use After Free
CVE-2025-62563
CWE-416 High
No
No
- 09.12.2025 SB2025120987
#VU119484 - Untrusted Pointer Dereference
CVE-2025-62561
CWE-822 High
No
No
- 09.12.2025 SB2025120987
#VU118329 - Out-of-bounds read
CVE-2025-60726
CWE-125 Medium
No
No
- 11.11.2025 SB2025111191
#VU118322 - Untrusted Pointer Dereference
CVE-2025-62200
CWE-822 High
No
No
- 11.11.2025 SB2025111191


Showing elements 101 - 120 out of 367