Microsoft Microsoft Excel

36 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2020-12262016 (32-bit edition) ; 2016 (64-bit edition) ; 2010 Service Pack 2 (32-bit editions) ; …A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'HIGH 8.817 %
CVE-2020-12252016 (32-bit edition) ; 2016 (64-bit edition) ; 2010 Service Pack 2 (32-bit editions) ; …A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'HIGH 8.817 %
CVE-2020-09062016 (32-bit edition) ; 2016 (64-bit edition) ; 2010 Service Pack 2 (32-bit editions) ; …A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'HIGH 8.812 %
CVE-2020-07602016 (32-bit edition) ; 2016 (64-bit edition) ; 2010 Service Pack 2 (32-bit editions) ; …A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka 'Microsoft Office Remote CHIGH 8.88.8 %
CVE-2020-07592016 (32-bit edition) ; 2016 (64-bit edition) ; 2010 Service Pack 2 (32-bit editions) ; …A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'HIGH 8.815 %
CVE-2020-06512016 (32-bit edition) ; 2016 (64-bit edition) ; 2010 Service Pack 2 (32-bit editions) ; …A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'HIGH 7.817 %
CVE-2020-06502016 (32-bit edition) ; 2016 (64-bit edition) ; 2010 Service Pack 2 (32-bit editions) ; …A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'HIGH 7.817 %
CVE-2019-14642016 (32-bit edition) ; 2016 (64-bit edition) ; 2010 Service Pack 2 (32-bit editions) ; …An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel InMEDIUM 5.58.7 %
CVE-2019-14482010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2013 Service Pack 1 (32-bit editions) ; …A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'HIGH 7.830 %
CVE-2019-14462010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2013 Service Pack 1 (32-bit editions) ; …An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel InMEDIUM 5.58.9 %
CVE-2019-13312010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2013 Service Pack 1 (32-bit editions) ; …A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'HIGH 8.820 %
CVE-2019-13272010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2013 Service Pack 1 (32-bit editions) ; …A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'HIGH 8.814 %
CVE-2019-12972010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2013 Service Pack 1 (32-bit editions) ; …A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'HIGH 8.822 %KEV
CVE-2019-12632010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2013 Service Pack 1 (32-bit editions) ; …An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel InMEDIUM 5.57.8 %
CVE-2019-11112010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2013 Service Pack 1 (32-bit editions) ; …A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'HIGH 8.813 %
CVE-2019-11102010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2013 Service Pack 1 (32-bit editions) ; …A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'HIGH 8.813 %
CVE-2019-08282010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2013 Service Pack 1 (32-bit editions) ; …A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'HIGH 7.814 %
CVE-2019-06692010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2013 Service Pack 1 (32-bit editions) ; …An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel InMEDIUM 6.56.4 %
CVE-2018-86362010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2013 RT Service Pack 1 ; …A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "HIGH 7.816 %
CVE-2018-86272010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2013 RT Service Pack 1 ; …An information disclosure vulnerability exists when Microsoft Excel software reads out of bound memory due to an uninitialized variable, whiMEDIUM 5.58.6 %
CVE-2018-85982010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2013 RT Service Pack 1 ; …An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel InMEDIUM 4.76.2 %
CVE-2018-85972010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2013 RT Service Pack 1 ; …A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "HIGH 7.816 %
CVE-2018-85772010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2013 RT Service Pack 1 ; …A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "HIGH 7.819 %
CVE-2018-85742016 (32-bit edition) ; 2016 (64-bit edition)A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "HIGH 7.819 %
CVE-2018-85022010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2013 RT Service Pack 1 ; …A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in Protected VieHIGH 8.820 %
CVE-2018-84292010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2013 RT Service Pack 1 ; …An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel InMEDIUM 5.512 %
CVE-2018-83822010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2013 RT Service Pack 1 ; …An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel InMEDIUM 5.513 %
CVE-2018-83792010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2013 RT Service Pack 1 ; …A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "HIGH 7.818 %
CVE-2018-83752010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2013 RT Service Pack 1 ; …A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "HIGH 7.817 %
CVE-2018-81622010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2013 RT Service Pack 1 ; …A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "HIGH 7.824 %
CVE-2018-81482010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2013 RT Service Pack 1 ; …A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "HIGH 7.824 %
CVE-2018-81472010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2013 RT Service Pack 1 ; …A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "HIGH 7.824 %
CVE-2018-10292007 Service Pack 3 ; 2010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; …A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "HIGH 7.821 %
CVE-2018-10272007 Service Pack 3 ; 2010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; …A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "HIGH 7.819 %
CVE-2018-10112010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2013 RT Service Pack 1 ; …A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "HIGH 7.820 %
CVE-2018-09202010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions)A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "HIGH 7.821 %