CVE-2000-0765: Microsoft Excel

Medium severity, CVSS 5.1. EPSS: 4% chance of exploitation in the next 30 days.

Buffer overflow in the HTML interpreter in Microsoft Office 2000 allows an attacker to execute arbitrary commands via a long embedded object tag, aka the "Microsoft Office HTML Object Tag" vulnerability.

Affected products

• Microsoft Excel: version 2000 only
• Microsoft PowerPoint: version 2000 only
• Microsoft Word: version 2000 only

Published 2000-10-20. Last modified 2026-06-16.