CVE-1999-1055: Microsoft Excel

High severity, CVSS 7.5. EPSS: 7% chance of exploitation in the next 30 days.

Microsoft Excel 97 does not warn the user before executing worksheet functions, which could allow attackers to execute arbitrary commands by using the CALL function to execute a malicious DLL, aka the Excel "CALL Vulnerability."

Affected products

• Microsoft Excel: version 97 only

Published 1999-12-31. Last modified 2026-06-16.