CVE-2011-1989

CVE-2011-1989 describes a critical vulnerability in various Microsoft Excel and Office products, including Excel 2003, 2007, and 2010, as well as Office for Mac, Excel Services, and Excel Web App. The flaw stems from improper parsing of conditional expressions in spreadsheets, allowing remote attackers to execute arbitrary code. With a CVSS score of 9.3, this vulnerability is highly severe, requiring no authentication and having a medium attack complexity, but leading to complete compromise of confidentiality, integrity, and availability. Despite its high severity and potential impact, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.