Vulnerabilities (CVE)

Filtered by vendor Microsoft Subscribe
Filtered by product Excel
Total 446 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2000-0597 1 Microsoft 2 Excel, Powerpoint 2026-06-16 7.5 HIGH N/A
Microsoft Office 2000 (Excel and PowerPoint) and PowerPoint 97 are marked as safe for scripting, which allows remote attackers to force Internet Explorer or some email clients to save files to arbitrary locations via the Visual Basic for Applications (VBA) SaveAs function, aka the "Office HTML Script" vulnerability.
CVE-2000-0419 1 Microsoft 10 Access, Excel, Frontpage and 7 more 2026-06-16 7.5 HIGH N/A
The Office 2000 UA ActiveX Control is marked as "safe for scripting," which allows remote attackers to conduct unauthorized activities via the "Show Me" function in Office Help, aka the "Office 2000 UA Control" vulnerability.
CVE-2000-0277 1 Microsoft 1 Excel 2026-06-16 7.2 HIGH N/A
Microsoft Excel 97 and 2000 does not warn the user when executing Excel Macro Language (XLM) macros in external text files, which could allow an attacker to execute a macro virus, aka the "XLM Text Macro" vulnerability.
CVE-1999-1055 1 Microsoft 1 Excel 2026-06-16 7.5 HIGH N/A
Microsoft Excel 97 does not warn the user before executing worksheet functions, which could allow attackers to execute arbitrary commands by using the CALL function to execute a malicious DLL, aka the Excel "CALL Vulnerability."
CVE-1999-0794 1 Microsoft 2 Excel, Office 2026-06-16 4.6 MEDIUM N/A
Microsoft Excel does not warn a user when a macro is present in a Symbolic Link (SYLK) format file.
CVE-1999-0717 1 Microsoft 5 Excel, Windows 2000, Windows 95 and 2 more 2026-06-16 2.6 LOW N/A
A remote attacker can disable the virus warning mechanism in Microsoft Excel 97.