Microsoft Excel Remote Code Execution Vulnerability
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Microsoft | Microsoft 365 Apps for Enterprise | affected |
|
||||||
| Microsoft | Microsoft Excel 2016 | affected |
|
||||||
| Microsoft | Microsoft Office 2019 | affected |
|
||||||
| Microsoft | Microsoft Office 365 for Mac | affected |
|
||||||
| Microsoft | Microsoft Office LTSC 2021 | affected |
|
||||||
| Microsoft | Microsoft Office LTSC 2024 | affected |
|
||||||
| Microsoft | Microsoft Office LTSC for Mac 2021 | affected |
|
||||||
| Microsoft | Microsoft Office LTSC for Mac 2024 | affected |
|
||||||
| Microsoft | Office Online Server | affected |
|
Configuration 1 [-]
|
No data.
| Vendor | Product | Versions | ||||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Microsoft | Excel 2016 |
|
||||||||
| Microsoft | Excel 2019 |
|
||||||||
| Microsoft | Microsoft 365 Apps For Enterprise |
|
||||||||
| Microsoft | Microsoft Office 365 For Mac |
|
||||||||
| Microsoft | Microsoft Office Ltsc 2021 |
|
||||||||
| Microsoft | Microsoft Office Ltsc 2024 |
|
||||||||
| Microsoft | Microsoft Office Ltsc For Mac 2021 |
|
||||||||
| Microsoft | Microsoft Office Ltsc For Mac 2024 |
|
||||||||
| Microsoft | Office Online Server |
|
No CVSS v4.0
No CVSS v3.0
No CVSS v2
This CVE is not in the KEV list.
Exploit prediction score: < 1% (0.466% probability within 30 days)
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Microsoft excel 2019
Microsoft microsoft 365 Apps For Enterprise Microsoft microsoft Office 365 For Mac Microsoft microsoft Office Ltsc 2021 Microsoft microsoft Office Ltsc 2024 Microsoft microsoft Office Ltsc For Mac 2021 Microsoft microsoft Office Ltsc For Mac 2024 Microsoft office Online Server |
|
| Vendors & Products |
Microsoft excel 2019
Microsoft microsoft 365 Apps For Enterprise Microsoft microsoft Office 365 For Mac Microsoft microsoft Office Ltsc 2021 Microsoft microsoft Office Ltsc 2024 Microsoft microsoft Office Ltsc For Mac 2021 Microsoft microsoft Office Ltsc For Mac 2024 Microsoft office Online Server |
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | |
| Title | Microsoft Excel Remote Code Execution Vulnerability | |
| First Time appeared |
Microsoft
Microsoft 365 Apps Microsoft excel 2016 Microsoft office 2019 Microsoft office 2021 Microsoft office 2024 Microsoft office 365 Microsoft office Macos 2021 Microsoft office Macos 2024 |
|
| Weaknesses | CWE-908 | |
| CPEs | cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:* cpe:2.3:a:microsoft:excel_2016:*:*:*:*:*:*:x86:* cpe:2.3:a:microsoft:office_2019:*:*:*:*:*:*:*:* cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:* cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:* cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:* cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:* cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:* cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:* |
|
| Vendors & Products |
Microsoft
Microsoft 365 Apps Microsoft excel 2016 Microsoft office 2019 Microsoft office 2021 Microsoft office 2024 Microsoft office 365 Microsoft office Macos 2021 Microsoft office Macos 2024 |
|
| References |
| |
| Metrics |
cvssV3_1
|