Microsoft Excel

Name: Microsoft Excel
Brand: Microsoft

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

1critical2high2medium0low

updated 2026-10-27

vulnerabilities (24)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-53783US	—	0.81% (57th)	Exploit	no fix	2025-08-12	4 versions
CVE-2025-49712US	—	20.7% (98th)	—	no fix	2025-08-12	4 versions
CVE-2018-8577US	high7.8	19.1% (97th)	—	no fix	2018-11-14	≤ Services on Microsoft SharePoint Server 2010 Service Pack 2
CVE-2025-53760US	—	18.9% (97th)	—	no fix	2025-08-12	4 versions
CVE-2018-1028US	high8.8	18.9% (97th)	—	no fix	2018-04-12	≤ Services on Microsoft SharePoint Enterprise Server 2013 Service Pack 1
CVE-2018-8627US	medium5.5	8.62% (95th)	—	no fix	2018-12-12	≤ Services on Microsoft SharePoint Server 2010 Service Pack 2
CVE-2025-53766US	—	8.19% (95th)	—	no fix	2025-08-12	4 versions
CVE-2026-62870US	—	0.82% (57th)	—	no fix	2026-08-04	≤ 2016 <16.0.5561.1001
CVE-2024-43106US	critical9.1	0.74% (54th)	—	no fix	2024-12-18	≤ 16.83 for macOS
CVE-2025-53740US	—	0.57% (47th)	—	no fix	2025-08-12	4 versions
CVE-2025-53731US	—	0.57% (47th)	—	no fix	2025-08-12	4 versions
CVE-2025-53739US	—	0.56% (46th)	—	no fix	2025-08-12	4 versions
CVE-2025-53735US	—	0.56% (46th)	—	no fix	2025-08-12	4 versions
CVE-2025-53733US	—	0.55% (46th)	—	no fix	2025-08-12	4 versions
CVE-2025-53737US	—	0.53% (44th)	—	no fix	2025-08-12	4 versions
CVE-2025-53761US	—	0.52% (44th)	—	no fix	2025-08-12	4 versions
CVE-2025-53759US	—	0.52% (44th)	—	no fix	2025-08-12	4 versions
CVE-2025-53741US	—	0.52% (44th)	—	no fix	2025-08-12	4 versions
CVE-2025-53738US	—	0.52% (44th)	—	no fix	2025-08-12	4 versions
CVE-2025-53736US	medium6.2	0.50% (43rd)	—	no fix	2025-08-12	4 versions
CVE-2025-53784US	—	0.50% (43rd)	—	no fix	2025-08-12	4 versions
CVE-2025-53732US	—	0.48% (41st)	—	no fix	2025-08-12	4 versions
CVE-2025-53734US	—	0.44% (38th)	—	no fix	2025-08-12	4 versions
CVE-2025-53730US	—	0.42% (36th)	—	no fix	2025-08-12	4 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-416Use After Free9 CVEs
CWE-122Heap-based Buffer Overflow5 CVEs
CWE-787Out-of-bounds Write3 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer2 CVEs
CWE-908Use of Uninitialized Resource2 CVEs
CWE-126Buffer Over-read1 CVEs
CWE-347Improper Verification of Cryptographic Signature1 CVEs
CWE-502Deserialization of Untrusted Data1 CVEs

sources (3)

Which sources assert this record, and when.

NLNCSC-NL (CSAF)19 CVEs
EUEU Vulnerability Database (ENISA)4 CVEs
DECERT-Bund (BSI CSAF)1 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan