GCVE - cpe:2.3:a:microsoft:excel:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:excel:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Excel (`0c59e20a-5ca3-5723-9b27-d37a6f9501df`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-43106`	vulnerable	2026-06-08 06:45:49.584955	Details available HIGH (7.1) A library injection vulnerability exists in Microsoft Excel 16.83 for macOS. A specially crafted library can leverage Excel's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions. Published: 2024-12-18T22:41:11.189Z Updated: 2024-12-19T16:43:40.631Z Open on db.gcve.eu Reference links https://talosintelligence.com/vulnerability_reports/TALOS-2024-1976	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-8627`	vulnerable	2026-06-08 05:12:06.280064	Details available An information disclosure vulnerability exists when Microsoft Excel software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Microsoft Office, Office 365 ProPlus, Microsoft Excel, Microsoft Excel Viewer, Excel. This CVE ID is unique from CVE-2018-8598. Published: 2018-12-12T00:00:00.000Z Updated: 2024-08-05T07:02:25.860Z Open on db.gcve.eu Reference links https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8627 http://www.securityfocus.com/bid/106120	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-8577`	vulnerable	2026-06-08 05:12:06.203585	Details available A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Office, Office 365 ProPlus, Microsoft Excel, Microsoft Excel Viewer, Excel. This CVE ID is unique from CVE-2018-8574. Published: 2018-11-14T01:00:00.000Z Updated: 2024-08-05T07:02:25.927Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/105834 http://www.securitytracker.com/id/1042134 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8577	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-1028`	vulnerable	2026-06-08 05:11:16.648238	Details available A remote code execution vulnerability exists when the Office graphics component improperly handles specially crafted embedded fonts, aka "Microsoft Office Graphics Remote Code Execution Vulnerability." This affects Word, Microsoft Office, Microsoft SharePoint, Excel, Microsoft SharePoint Server. Published: 2018-04-12T01:00:00.000Z Updated: 2024-08-05T03:44:11.716Z Open on db.gcve.eu Reference links https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1028 http://www.securitytracker.com/id/1040654 http://www.securityfocus.com/bid/103641	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-3431`	vulnerable	2026-06-08 04:49:09.298767	Details available Buffer overflow in certain Asian language versions of Microsoft Excel might allow user-assisted attackers to execute arbitrary code via a crafted STYLE record in a spreadsheet that triggers the overflow when the user attempts to repair the document or selects the "Style" option, as demonstrated by nanika.xls. NOTE: Microsoft has confirmed to CVE via e-mail that this is different than the other Excel vulnerabilities announced before 20060707, including CVE-2006-3059 and CVE-2006-3086. Published: 2006-07-07T18:00:00.000Z Updated: 2024-08-07T18:30:33.280Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/439427/100/0/threaded http://www.securityfocus.com/archive/1/449179/100/0/threaded http://secunia.com/advisories/20268 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-059 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A431	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-3014`	vulnerable	2026-06-08 04:49:08.077906	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2001-0718`	vulnerable	2026-06-08 04:45:20.705611	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-1999-0794`	vulnerable	2026-06-08 04:44:58.118163	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-1999-0717`	vulnerable	2026-06-08 04:44:58.096708	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.