Microsoft Office Excel Viewer vulnerabilities

29 CVEs affecting Microsoft Office Excel Viewer, 2 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2010-0823, published 2010-06-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2009-0557: Microsoft Office Object Record Corruption Vulnerability, published 2009-06-10. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2022-06-08. EPSS: 53% chance of exploitation in the next 30 days. Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Excel in 2007 Microsoft Office System SP1 and SP2; Open XML File Format Converter for Mac;…
CVE-2009-0238: Microsoft Office Remote Code Execution, published 2009-02-25. High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2026-04-14. EPSS: 42.9% chance of exploitation in the next 30 days. Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1; Excel Viewer 2003 Gold and SP3; Excel Viewer; Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1; and Excel in…
CVE-2010-0258, published 2010-03-10. High severity, CVSS 7.8. EPSS: 61% chance of exploitation in the next 30 days. Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack…
CVE-2009-0561, published 2009-06-10. High severity, CVSS 9.3. EPSS: 36.9% chance of exploitation in the next 30 days. Integer overflow in Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Excel in 2007 Microsoft Office System SP1 and SP2; Open XML File Format…
CVE-2009-1134, published 2009-06-10. High severity, CVSS 9.3. EPSS: 35.7% chance of exploitation in the next 30 days. Excel in 2007 Microsoft Office System SP1 and SP2; Microsoft Office Excel Viewer; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allow remote…
CVE-2008-3006, published 2008-08-12. High severity, CVSS 9.3. EPSS: 35.6% chance of exploitation in the next 30 days. Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1; Office Excel Viewer 2003 Gold and SP3; Office Excel Viewer; Office Compatibility Pack 2007 Gold and SP1; Office…
CVE-2008-3004, published 2008-08-12. High severity, CVSS 9.3. EPSS: 32.2% chance of exploitation in the next 30 days. Microsoft Office Excel 2000 SP3, 2002 SP3, and 2003 SP2 and SP3; Office Excel Viewer 2003; and Office 2004 and 2008 for Mac do not properly validate index values for AxesSet records when loading…
CVE-2009-0558, published 2009-06-10. High severity, CVSS 9.3. EPSS: 31.1% chance of exploitation in the next 30 days. Array index error in Excel in Microsoft Office 2000 SP3 and Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac, allows remote attackers to execute arbitrary code via a crafted…
CVE-2009-0559, published 2009-06-10. High severity, CVSS 9.3. EPSS: 29.4% chance of exploitation in the next 30 days. Stack-based buffer overflow in Excel in Microsoft Office 2000 SP3 and Office XP SP3 allows remote attackers to execute arbitrary code via a crafted Excel file with a malformed record object, aka…
CVE-2009-0100, published 2009-04-15. High severity, CVSS 9.3. EPSS: 28.8% chance of exploitation in the next 30 days. Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1; Excel in Microsoft Office 2004 and 2008 for Mac; Microsoft Office Excel Viewer and Excel Viewer 2003 SP3; and Microsoft Office…

Latest

CVE-2010-0823, published 2010-06-08. High severity, CVSS 9.3. EPSS: 20.5% chance of exploitation in the next 30 days. Unspecified vulnerability in Microsoft Office Excel 2002 SP3, 2003 SP3, 2007 SP1 and SP2; Office 2004 for mac; Office 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer SP1 and…
CVE-2010-0821, published 2010-06-08. High severity, CVSS 9.3. EPSS: 24.3% chance of exploitation in the next 30 days. Unspecified vulnerability in Microsoft Office Excel 2002 SP3, 2003 SP3, 2007 SP1 and SP2; Office 2004 for mac; Office 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer SP1 and…
CVE-2010-0264, published 2010-03-10. High severity, CVSS 9.3. EPSS: 21.2% chance of exploitation in the next 30 days. Microsoft Office Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly parse the Excel file format, which allows remote attackers to execute…
CVE-2010-0263, published 2010-03-10. High severity, CVSS 9.3. EPSS: 25.7% chance of exploitation in the next 30 days. Microsoft Office Excel 2007 SP1 and SP2; Office 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer SP1 and SP2; Office Compatibility Pack for Word, Excel, and PowerPoint 2007…
CVE-2010-0262, published 2010-03-10. High severity, CVSS 9.3. EPSS: 21.3% chance of exploitation in the next 30 days. Microsoft Office Excel 2007 SP1 and SP2 and Office 2004 for Mac do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet that…
CVE-2010-0261, published 2010-03-10. High severity, CVSS 9.3. EPSS: 23.1% chance of exploitation in the next 30 days. Heap-based buffer overflow in Microsoft Office Excel 2007 SP1 and SP2 and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote attackers to execute…
CVE-2010-0260, published 2010-03-10. High severity, CVSS 9.3. EPSS: 23.1% chance of exploitation in the next 30 days. Heap-based buffer overflow in Microsoft Office Excel 2007 SP1 and SP2; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2…
CVE-2010-0257, published 2010-03-10. High severity, CVSS 9.3. EPSS: 18.6% chance of exploitation in the next 30 days. Microsoft Office Excel 2002 SP3 does not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Microsoft Office Excel Record…
CVE-2009-3126, published 2009-10-14. High severity, CVSS 9.3. EPSS: 23.5% chance of exploitation in the next 30 days. Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002…