Microsoft Excel Spreadsheet Software

Don't miss out!

Thousands of developers use stack.watch to stay informed.
Get an email whenever new security vulnerabilities are reported in Microsoft Excel.

Recent Microsoft Excel Security Advisories

Advisory	Title	Published
CVE-2025-49711	CVE-2025-49711 Microsoft Excel Remote Code Execution Vulnerability	July 8, 2025
CVE-2025-48812	CVE-2025-48812 Microsoft Excel Information Disclosure Vulnerability	July 8, 2025
CVE-2025-47174	CVE-2025-47174 Microsoft Excel Remote Code Execution Vulnerability	June 10, 2025
CVE-2025-47165	CVE-2025-47165 Microsoft Excel Remote Code Execution Vulnerability	June 10, 2025
CVE-2025-32704	CVE-2025-32704 Microsoft Excel Remote Code Execution Vulnerability	May 13, 2025
CVE-2025-30393	CVE-2025-30393 Microsoft Excel Remote Code Execution Vulnerability	May 13, 2025
CVE-2025-30383	CVE-2025-30383 Microsoft Excel Remote Code Execution Vulnerability	May 13, 2025
CVE-2025-30381	CVE-2025-30381 Microsoft Excel Remote Code Execution Vulnerability	May 13, 2025
CVE-2025-30379	CVE-2025-30379 Microsoft Excel Remote Code Execution Vulnerability	May 13, 2025
CVE-2025-30376	CVE-2025-30376 Microsoft Excel Remote Code Execution Vulnerability	May 13, 2025

Known Exploited Microsoft Excel Vulnerabilities

The following Microsoft Excel vulnerabilities have been marked by CISA as Known to be Exploited by threat actors.

Title	Description	Added
Microsoft Excel Remote Code Execution Vulnerability	A remote code execution vulnerability exists in Microsoft Excel when the software fails to properly handle objects in memory. CVE-2019-1297 Exploit Probability: 56.8%	March 3, 2022
Microsoft Office Security Feature Bypass Vulnerability	A security feature bypass vulnerability exists when Microsoft Office improperly handles input. An attacker who successfully exploited the vulnerability could execute arbitrary commands. CVE-2016-7262 Exploit Probability: 85.2%	March 3, 2022
Microsoft Excel Featheader Record Memory Corruption Vulnerability	Microsoft Office Excel allows remote attackers to execute arbitrary code via a spreadsheet with a FEATHEADER record containing an invalid cbHdrData size element that affects a pointer offset. CVE-2009-3129 Exploit Probability: 89.0%	March 3, 2022

Of the known exploited vulnerabilities above, 2 are in the top 1%, or the 99th percentile of the EPSS exploit probability rankings. The vulnerability CVE-2019-1297: Microsoft Excel Remote Code Execution Vulnerability is in the top 5% of the currently known exploitable vulnerabilities.

By the Year

In 2025 there have been 23 vulnerabilities in Microsoft Excel with an average score of 7.7 out of ten. Last year, in 2024 Excel had 11 security vulnerabilities published. That is, 12 more vulnerabilities have already been reported in 2025 as compared to last year. Last year, the average CVE base score was greater by 0.01

Year	Vulnerabilities	Average Score
2025	23	7.73
2024	11	7.74
2023	8	7.43
2022	10	7.49
2021	28	7.47
2020	32	7.86
2019	11	7.51
2018	22	7.23

It may take a day or so for new Excel vulnerabilities to show up in the stats or in the list of recent security vulnerabilties. Additionally vulnerabilities may be tagged under a different product or component name.

Recent Microsoft Excel Security Vulnerabilities

Use after free in Microsoft Office Excel

CVE-2025-47165 7.8 - High - June 10, 2025

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Dangling pointer

Access of resource using incompatible type ('type confusion') in Microsoft Office Excel

CVE-2025-30383 7.8 - High - May 13, 2025

Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Object Type Confusion

Buffer over-read in Microsoft Office Excel

CVE-2025-32704 7.8 - High - May 13, 2025

Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Out-of-bounds Read

Heap-based buffer overflow in Microsoft Office Excel

CVE-2025-30376 7.8 - High - May 13, 2025

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Memory Corruption

Use after free in Microsoft Office

CVE-2025-30377 7.8 - High - May 13, 2025

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

Dangling pointer

Release of invalid pointer or reference in Microsoft Office Excel

CVE-2025-30379 7.8 - High - May 13, 2025

Release of invalid pointer or reference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Release of Invalid Pointer or Reference

Out-of-bounds read in Microsoft Office Excel

CVE-2025-30381 7.8 - High - May 13, 2025

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Out-of-bounds Read

Use after free in Microsoft Office Excel

CVE-2025-29977 7.8 - High - May 13, 2025

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Dangling pointer

Heap-based buffer overflow in Microsoft Office Excel

CVE-2025-29979 7.8 - High - May 13, 2025

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Memory Corruption

Access of resource using incompatible type ('type confusion') in Microsoft Office Excel

CVE-2025-30375 7.8 - High - May 13, 2025

Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Object Type Confusion

Use after free in Microsoft Office Excel

CVE-2025-27750 7.8 - High - April 08, 2025

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Dangling pointer

Use after free in Microsoft Office Excel

CVE-2025-27751 7.8 - High - April 08, 2025

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Dangling pointer

Out-of-bounds read in Microsoft Office

CVE-2025-26642 7.8 - High - April 08, 2025

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.

Out-of-bounds Read

Stack-based buffer overflow in Microsoft Office Excel

CVE-2025-24075 7.8 - High - March 11, 2025

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Stack Overflow

Use after free in Microsoft Office Excel

CVE-2025-24081 7.8 - High - March 11, 2025

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Dangling pointer