Known vulnerabilities in Microsoft Excel - page 8

Vendor: Microsoft
Software: Microsoft Excel
Software CPE: cpe:2.3:a:microsoft:microsoft_excel:*:*:*:*:*:microsoft_office:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 337
Public exploits: 24
Known exploited (KEV): 13
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Excel Microsoft Excel is affected by 337 known vulnerabilities: 8 critical, 269 high, 34 medium, 26 low Critical High Medium Low

Vulnerabilities (337)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU100322 - Command injection
CVE-2024-49026		 CWE-77 High
No
No
 - 12.11.2024 SB20241112117
#VU100321 - Use After Free
CVE-2024-49027		 CWE-416 High
No
No
 - 12.11.2024 SB20241112117
#VU98241 - Use After Free
CVE-2024-43504		 CWE-416 High
Available
No
 - 09.10.2024 SB2024100908
#VU97097 - Use After Free
CVE-2024-43465		 CWE-416 High
No
No
 - 10.09.2024 SB20240910135
#VU89487 - Deserialization of Untrusted Data
CVE-2024-30042		 CWE-502 High
No
No
 - 14.05.2024 SB2024051467
#VU86485 - Improper input validation
CVE-2024-20673		 CWE-20 High
No
No
 - 13.02.2024 SB2024021382
#VU83134 - Improper input validation
CVE-2023-36041		 CWE-20 High
No
No
 - 15.11.2023 SB2023111502
#VU83131 - Security Features
CVE-2023-36037		 CWE-254 High
No
No
 - 15.11.2023 SB2023111502
#VU80726 - Exposure of sensitive information to an unauthorized actor
CVE-2023-36766		 CWE-200 Medium
No
No
 15.0.5589.1000, 16.0.5413.1000 13.09.2023 SB2023091319
#VU79179 - Improper input validation
CVE-2023-36896		 CWE-20 High
No
No
 - 08.08.2023 SB2023080882
#VU78180 - Exposure of sensitive information to an unauthorized actor
CVE-2023-33162		 CWE-200 Medium
No
No
 - 12.07.2023 SB2023071239
#VU77264 - Improper input validation
CVE-2023-33137		 CWE-20 High
Available
No
 16.0.16327.20324, 16.0.16501.20210 13.06.2023 SB2023061375
#VU77263 - Improper input validation
CVE-2023-32029		 CWE-20 High
No
No
 16.0.16327.20324, 16.0.16501.20210 13.06.2023 SB2023061375
#VU77260 - Improper input validation
CVE-2023-33133		 CWE-20 High
No
No
 16.0.16327.20324, 16.0.16501.20210 13.06.2023 SB2023061375
#VU75899 - Improper input validation
CVE-2023-24953		 CWE-20 High
No
No
 - 09.05.2023 SB2023050993
#VU73582 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2023-23398		 CWE-451 High
No
No
 - 14.03.2023 SB2023031456
#VU73573 - Improper input validation
CVE-2023-23399		 CWE-20 High
Available
No
 - 14.03.2023 SB2023031456
#VU69143 - Improper input validation
CVE-2022-41063		 CWE-20 High
No
No
 - 09.11.2022 SB2022110904
#VU69142 - Improper input validation
CVE-2022-41106		 CWE-20 High
No
No
 - 09.11.2022 SB2022110904
#VU69140 - Security Features
CVE-2022-41104		 CWE-254 Medium
No
No
 - 09.11.2022 SB2022110904


Showing elements 141 - 160 out of 337