CVE-2015-6123: Microsoft Excel For Mac

Medium severity, CVSS 4.3. EPSS: 11.2% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in Microsoft Excel for Mac 2011 and Excel 2016 for Mac allows remote attackers to inject arbitrary web script or HTML via a crafted e-mail message that is mishandled by Outlook for Mac, aka "Microsoft Outlook for Mac Spoofing Vulnerability."

Affected products

• Microsoft Excel For Mac: version 2011 only; version 2016 only

Published 2015-11-11. Last modified 2026-06-17.