{"schema_version":1,"title":"Microsoft Excel vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 24 vulnerabilities in Microsoft Excel: 0 in the last 7 days and 7 in the last 90 days, 6 of them critical and 6 exploited in the wild. The most recent, CVE-2026-81957, was published on 8 September 2026.","url":"https://junglewise.ai/threats/technologies/excel","json_url":"https://junglewise.ai/threats/technologies/excel.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/excel","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":15,"all_time":24,"critical":6,"exploited":6,"last_7_days":0,"last_30_days":5,"last_90_days":7,"last_365_days":19},"latest":[{"cve":"CVE-2026-81957","cvss":7.8,"epss":0.0047,"slug":"cve-2026-81957-microsoft-excel-out-of-bounds-read-remote-code-execution","title":"Microsoft Excel out-of-bounds read remote code execution","severity":"high","exploited":false,"published_at":"2026-09-08T18:20:59.49+00:00","url":"https://junglewise.ai/threats/cve-2026-81957-microsoft-excel-out-of-bounds-read-remote-code-execution"},{"cve":"CVE-2026-81397","cvss":7.8,"epss":0.0047,"slug":"cve-2026-81397-microsoft-excel-heap-based-buffer-overflow","title":"Microsoft Excel heap-based buffer overflow","severity":"high","exploited":false,"published_at":"2026-09-08T18:20:56.3+00:00","url":"https://junglewise.ai/threats/cve-2026-81397-microsoft-excel-heap-based-buffer-overflow"},{"cve":"CVE-2026-81396","cvss":7.8,"epss":0.0047,"slug":"cve-2026-81396-microsoft-excel-stack-based-buffer-overflow","title":"Microsoft Excel stack-based buffer overflow","severity":"high","exploited":false,"published_at":"2026-09-08T18:20:56.163+00:00","url":"https://junglewise.ai/threats/cve-2026-81396-microsoft-excel-stack-based-buffer-overflow"},{"cve":"CVE-2026-81388","cvss":7.8,"epss":0.0047,"slug":"cve-2026-81388-microsoft-excel-stack-based-buffer-overflow","title":"Microsoft Excel stack-based buffer overflow","severity":"high","exploited":false,"published_at":"2026-09-08T18:20:55.103+00:00","url":"https://junglewise.ai/threats/cve-2026-81388-microsoft-excel-stack-based-buffer-overflow"},{"cve":"CVE-2026-78515","cvss":6.5,"epss":0.0092,"slug":"cve-2026-78515-microsoft-excel-out-of-bounds-read-information-disclosure","title":"Microsoft Excel out-of-bounds read information disclosure","severity":"medium","exploited":false,"published_at":"2026-09-08T18:20:46.85+00:00","url":"https://junglewise.ai/threats/cve-2026-78515-microsoft-excel-out-of-bounds-read-information-disclosure"},{"cve":"CVE-2026-68794","cvss":7.8,"epss":0.0047,"slug":"cve-2026-68794-microsoft-excel-heap-based-buffer-overflow","title":"Microsoft Excel heap-based buffer overflow","severity":"high","exploited":false,"published_at":"2026-08-11T17:19:02.877+00:00","url":"https://junglewise.ai/threats/cve-2026-68794-microsoft-excel-heap-based-buffer-overflow"},{"cve":"CVE-2026-68793","cvss":7.8,"epss":0.0047,"slug":"cve-2026-68793-microsoft-excel-out-of-bounds-read-in-parsing","title":"Microsoft Excel out-of-bounds read in parsing","severity":"high","exploited":false,"published_at":"2026-08-11T17:19:02.747+00:00","url":"https://junglewise.ai/threats/cve-2026-68793-microsoft-excel-out-of-bounds-read-in-parsing"},{"cve":"CVE-2026-45469","cvss":7.8,"slug":"cve-2026-45469-microsoft-office-excel-integer-underflow-code-execution","title":"Microsoft Office Excel integer underflow code execution","severity":"high","exploited":false,"published_at":"2026-06-09T17:17:21.46+00:00","url":"https://junglewise.ai/threats/cve-2026-45469-microsoft-office-excel-integer-underflow-code-execution"},{"cve":"CVE-2026-45459","cvss":3.3,"slug":"cve-2026-45459-microsoft-office-excel-protection-mechanism-failure-security","title":"Microsoft Office Excel protection mechanism failure security bypass","severity":"low","exploited":false,"published_at":"2026-06-09T17:17:20.203+00:00","url":"https://junglewise.ai/threats/cve-2026-45459-microsoft-office-excel-protection-mechanism-failure-security"},{"cve":"CVE-2026-45455","cvss":3.3,"slug":"cve-2026-45455-microsoft-office-excel-out-of-bounds-read","title":"Microsoft Office Excel out-of-bounds read","severity":"low","exploited":false,"published_at":"2026-06-09T17:17:19.66+00:00","url":"https://junglewise.ai/threats/cve-2026-45455-microsoft-office-excel-out-of-bounds-read"},{"cve":"CVE-2026-44823","cvss":7.8,"slug":"cve-2026-44823-microsoft-office-excel-integer-underflow-code-execution","title":"Microsoft Office Excel integer underflow code execution","severity":"high","exploited":false,"published_at":"2026-06-09T17:17:18.72+00:00","url":"https://junglewise.ai/threats/cve-2026-44823-microsoft-office-excel-integer-underflow-code-execution"},{"cve":"CVE-2026-44822","cvss":8.2,"slug":"cve-2026-44822-microsoft-office-excel-out-of-bounds-read-information-disclosure","title":"Microsoft Office Excel out-of-bounds read information disclosure","severity":"high","exploited":false,"published_at":"2026-06-09T17:17:18.58+00:00","url":"https://junglewise.ai/threats/cve-2026-44822-microsoft-office-excel-out-of-bounds-read-information-disclosure"},{"cve":"CVE-2026-44820","cvss":7.8,"slug":"cve-2026-44820-microsoft-office-excel-integer-underflow-code-execution","title":"Microsoft Office Excel integer underflow code execution","severity":"high","exploited":false,"published_at":"2026-06-09T17:17:18.313+00:00","url":"https://junglewise.ai/threats/cve-2026-44820-microsoft-office-excel-integer-underflow-code-execution"},{"cve":"CVE-2026-44818","cvss":7,"slug":"cve-2026-44818-microsoft-office-excel-integer-underflow-code-execution","title":"Microsoft Office Excel integer underflow code execution","severity":"high","exploited":false,"published_at":"2026-06-09T17:17:18.04+00:00","url":"https://junglewise.ai/threats/cve-2026-44818-microsoft-office-excel-integer-underflow-code-execution"},{"cve":"CVE-2026-44817","cvss":7.8,"slug":"cve-2026-44817-microsoft-office-excel-integer-underflow-code-execution","title":"Microsoft Office Excel integer underflow code execution","severity":"high","exploited":false,"published_at":"2026-06-09T17:17:17.89+00:00","url":"https://junglewise.ai/threats/cve-2026-44817-microsoft-office-excel-integer-underflow-code-execution"},{"cve":"CVE-2026-40362","cvss":7.8,"epss":0.0006,"slug":"cve-2026-40362-microsoft-office-excel-heap-buffer-overflow","title":"Microsoft Office Excel heap buffer overflow","severity":"high","exploited":false,"published_at":"2026-05-12T18:17:15.077+00:00","url":"https://junglewise.ai/threats/cve-2026-40362-microsoft-office-excel-heap-buffer-overflow"},{"cve":"CVE-2026-40360","cvss":7.8,"epss":0.0006,"slug":"cve-2026-40360-microsoft-office-excel-out-of-bounds-read","title":"Microsoft Office Excel out-of-bounds read","severity":"high","exploited":false,"published_at":"2026-05-12T18:17:14.817+00:00","url":"https://junglewise.ai/threats/cve-2026-40360-microsoft-office-excel-out-of-bounds-read"},{"cve":"CVE-2026-40359","cvss":7.8,"epss":0.0006,"slug":"cve-2026-40359-microsoft-office-excel-use-after-free-code-execution","title":"Microsoft Office Excel use after free code execution","severity":"high","exploited":false,"published_at":"2026-05-12T18:17:14.673+00:00","url":"https://junglewise.ai/threats/cve-2026-40359-microsoft-office-excel-use-after-free-code-execution"},{"cve":"CVE-2009-0238","cvss":9.3,"epss":0.7491,"slug":"cve-2009-0238-microsoft-excel-remote-code-execution-via-malformed-object","title":"Microsoft Excel remote code execution via malformed object","severity":"critical","exploited":true,"published_at":"2026-04-14T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2009-0238-microsoft-excel-remote-code-execution-via-malformed-object"},{"cve":"CVE-2007-0671","cvss":8.8,"epss":0.5549,"slug":"cve-2007-0671-microsoft-office-excel-remote-code-execution-vulnerability","title":"Microsoft Office Excel remote code execution vulnerability","severity":"critical","exploited":true,"published_at":"2025-08-12T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2007-0671-microsoft-office-excel-remote-code-execution-vulnerability"},{"cve":"CVE-2009-0557","cvss":9.3,"slug":"cve-2009-0557-microsoft-office-object-record-corruption-vulnerability","title":"Microsoft Office Object Record Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2022-06-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2009-0557-microsoft-office-object-record-corruption-vulnerability"},{"cve":"CVE-2016-7262","cvss":7.8,"slug":"cve-2016-7262-microsoft-office-security-feature-bypass-vulnerability","title":"Microsoft Office Security Feature Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-7262-microsoft-office-security-feature-bypass-vulnerability"},{"cve":"CVE-2009-3129","cvss":9.3,"slug":"cve-2009-3129-microsoft-excel-featheader-record-memory-corruption-vulnerability","title":"Microsoft Excel Featheader Record Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2009-3129-microsoft-excel-featheader-record-memory-corruption-vulnerability"},{"cve":"CVE-2019-1297","cvss":8.8,"slug":"cve-2019-1297-microsoft-excel-remote-code-execution-vulnerability","title":"Microsoft Excel Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-1297-microsoft-excel-remote-code-execution-vulnerability"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":5},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Microsoft Windows","slug":"windows-","vulnerabilities":963,"url":"https://junglewise.ai/threats/technologies/windows-"},{"name":"Microsoft Windows 10","slug":"windows-10","vulnerabilities":588,"url":"https://junglewise.ai/threats/technologies/windows-10"},{"name":"Microsoft Windows 11","slug":"windows-11","vulnerabilities":493,"url":"https://junglewise.ai/threats/technologies/windows-11"},{"name":"Microsoft Windows Server 2012","slug":"windows-server-2012","vulnerabilities":293,"url":"https://junglewise.ai/threats/technologies/windows-server-2012"},{"name":"Microsoft Windows Server 2016","slug":"windows-server-2016","vulnerabilities":213,"url":"https://junglewise.ai/threats/technologies/windows-server-2016"},{"name":"Microsoft Windows Server 2019","slug":"windows-server-2019","vulnerabilities":211,"url":"https://junglewise.ai/threats/technologies/windows-server-2019"},{"name":"Microsoft Windows 11 24h2","slug":"windows-11-24h2","vulnerabilities":192,"url":"https://junglewise.ai/threats/technologies/windows-11-24h2"},{"name":"Microsoft Windows Server 2022","slug":"windows-server-2022","vulnerabilities":178,"url":"https://junglewise.ai/threats/technologies/windows-server-2022"},{"name":"Microsoft Edge","slug":"edge-chromium-based","vulnerabilities":167,"url":"https://junglewise.ai/threats/technologies/edge-chromium-based"},{"name":"Microsoft Windows 11 25h2","slug":"windows-11-25h2","vulnerabilities":161,"url":"https://junglewise.ai/threats/technologies/windows-11-25h2"},{"name":"Microsoft Windows 11 Version 26H1","slug":"windows-11-version-26h1","vulnerabilities":135,"url":"https://junglewise.ai/threats/technologies/windows-11-version-26h1"},{"name":"Microsoft Windows Server 2025","slug":"windows-server-2025","vulnerabilities":124,"url":"https://junglewise.ai/threats/technologies/windows-server-2025"}],"technology":{"hub":true,"name":"Microsoft Excel","slug":"excel","vendor":{"name":"Microsoft","slug":"microsoft","url":"https://junglewise.ai/threats/vendors/microsoft"},"aliases":[],"category":"software","homepage":"https://www.microsoft.com/en-us/microsoft-365/excel","description":"A spreadsheet application used for data analysis, calculation, and visualization.","url":"https://junglewise.ai/threats/technologies/excel"},"most_severe":[{"cve":"CVE-2009-0238","cvss":9.3,"epss":0.7491,"slug":"cve-2009-0238-microsoft-excel-remote-code-execution-via-malformed-object","title":"Microsoft Excel remote code execution via malformed object","severity":"critical","exploited":true,"published_at":"2026-04-14T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2009-0238-microsoft-excel-remote-code-execution-via-malformed-object"},{"cve":"CVE-2009-0557","cvss":9.3,"slug":"cve-2009-0557-microsoft-office-object-record-corruption-vulnerability","title":"Microsoft Office Object Record Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2022-06-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2009-0557-microsoft-office-object-record-corruption-vulnerability"},{"cve":"CVE-2009-3129","cvss":9.3,"slug":"cve-2009-3129-microsoft-excel-featheader-record-memory-corruption-vulnerability","title":"Microsoft Excel Featheader Record Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2009-3129-microsoft-excel-featheader-record-memory-corruption-vulnerability"},{"cve":"CVE-2007-0671","cvss":8.8,"epss":0.5549,"slug":"cve-2007-0671-microsoft-office-excel-remote-code-execution-vulnerability","title":"Microsoft Office Excel remote code execution vulnerability","severity":"critical","exploited":true,"published_at":"2025-08-12T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2007-0671-microsoft-office-excel-remote-code-execution-vulnerability"},{"cve":"CVE-2019-1297","cvss":8.8,"slug":"cve-2019-1297-microsoft-excel-remote-code-execution-vulnerability","title":"Microsoft Excel Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-1297-microsoft-excel-remote-code-execution-vulnerability"},{"cve":"CVE-2016-7262","cvss":7.8,"slug":"cve-2016-7262-microsoft-office-security-feature-bypass-vulnerability","title":"Microsoft Office Security Feature Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-7262-microsoft-office-security-feature-bypass-vulnerability"},{"cve":"CVE-2026-44822","cvss":8.2,"slug":"cve-2026-44822-microsoft-office-excel-out-of-bounds-read-information-disclosure","title":"Microsoft Office Excel out-of-bounds read information disclosure","severity":"high","exploited":false,"published_at":"2026-06-09T17:17:18.58+00:00","url":"https://junglewise.ai/threats/cve-2026-44822-microsoft-office-excel-out-of-bounds-read-information-disclosure"},{"cve":"CVE-2026-81957","cvss":7.8,"epss":0.0047,"slug":"cve-2026-81957-microsoft-excel-out-of-bounds-read-remote-code-execution","title":"Microsoft Excel out-of-bounds read remote code execution","severity":"high","exploited":false,"published_at":"2026-09-08T18:20:59.49+00:00","url":"https://junglewise.ai/threats/cve-2026-81957-microsoft-excel-out-of-bounds-read-remote-code-execution"},{"cve":"CVE-2026-81397","cvss":7.8,"epss":0.0047,"slug":"cve-2026-81397-microsoft-excel-heap-based-buffer-overflow","title":"Microsoft Excel heap-based buffer overflow","severity":"high","exploited":false,"published_at":"2026-09-08T18:20:56.3+00:00","url":"https://junglewise.ai/threats/cve-2026-81397-microsoft-excel-heap-based-buffer-overflow"},{"cve":"CVE-2026-81396","cvss":7.8,"epss":0.0047,"slug":"cve-2026-81396-microsoft-excel-stack-based-buffer-overflow","title":"Microsoft Excel stack-based buffer overflow","severity":"high","exploited":false,"published_at":"2026-09-08T18:20:56.163+00:00","url":"https://junglewise.ai/threats/cve-2026-81396-microsoft-excel-stack-based-buffer-overflow"}],"generated_at":"2026-09-26T09:24:00.138874+00:00"}