Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2007-0671

84
FAUCET Score

CVE-2007-0671 is an unspecified vulnerability impacting Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and potentially other Office products. This high-severity vulnerability (CVSS 8.8) allows remote, user-assisted attackers to execute arbitrary code, leading to complete compromise of confidentiality, integrity, and availability. It is actively exploited in the wild, as evidenced by its inclusion in CISA's KEV catalog and mentions of targeted zero-day attacks. Despite its age, community discussion remains high, indicating ongoing relevance and concern.

Impacted Technologies

VendorProductVersion(s)CPE
2000CPE matchmatch criteria
cpe:2.3:a:microsoft:access:2000:*:*:*:*:*:*:*
2002CPE matchmatch criteria
cpe:2.3:a:microsoft:access:2002:*:*:*:*:*:*:*
2003CPE matchmatch criteria
cpe:2.3:a:microsoft:access:2003:*:*:*:*:*:*:*
2000CPE matchmatch criteria
cpe:2.3:a:microsoft:excel:2000:*:*:*:*:*:*:*
2002CPE matchmatch criteria
cpe:2.3:a:microsoft:excel:2002:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

9.3HIGH

AV:N/AC:M/Au:N/C:C/I:C/A:C

Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Exploitability Score
8.6
Impact Score
10.0
CvssVersion
2.0

Exploit Intelligence

EPSS Score
42.14%
Probability of exploitation in next 30 days
EPSS Percentile
98.6%
Percentile rank of EPSS score among Peer Group
As of 2026-07-24
Model: v2026.06.15
Added to KEV · Aug 12, 2025
This CVE's current EPSS score of 0.4214 is in the 99th percentile among its peer group of 14,824 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.1 Security Researcher mentions.

Remediation

Vendor Patches (1)

microsoftvendor investigatingvia nvd_reference
View patch

References

learn.microsoft.com / en-us/security-updates/securitybulletins/2007/ms07-015
Vendor Advisory
cisa.gov / known-exploited-vulnerabilities-catalog
US Government Resource
osvdb.org / 31901
Broken Link
docs.microsoft.com / en-us/security-updates/securitybulletins/2007/ms07-015
Vendor Advisory
secunia.com / advisories/24008
Broken LinkVendor Advisory
securitytracker.com / id
Broken Link
exchange.xforce.ibmcloud.com / vulnerabilities/32178
Third Party Advisory
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A301
Broken Link
vil.nai.com / vil/content/v_141393.htm
Broken Link
avertlabs.com / research/blog
Broken Link
kb.cert.org / vuls/id/613740
US Government Resource
microsoft.com / technet/security/advisory/932553.mspx
Broken LinkVendor Advisory
securityfocus.com / bid/22383
Broken Link
us-cert.gov / cas/techalerts/TA07-044A.html
Broken LinkUS Government Resource
vupen.com / english/advisories/2007/0463
Vendor Advisory