Excel Viewer

Vendor:

First CVE: Jun 17, 2006 · Active for 20 years

125
Total CVEs
More Total CVEs than 99% of tracked products
9.6
Avg CVEs / Year
Higher CVE frequency than 95% of tracked products
8.4
Avg CVSS
Higher Avg CVSS than 75% of tracked products
5.6%
KEV Rate
Higher KEV Rate than 97% of tracked products

Trends Over Time

The number and severity of CVEs published that impact Excel Viewer over time

Volume of CVEsAvg CVSS Base Score
First CVE
Jun 17, 2006
20 years ago
Most Recent CVE
Mar 5, 2019
2,698 days ago

CVE Severity & Scoring

Excel Viewer125 CVEs
All CVEs352,294 CVEs
MediumHighCritical
Attack Vector
Local36 (28.8%)
Network8 (6.4%)
Unknown81 (64.8%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low43 (34.4%)
High1 (0.8%)
Unknown81 (64.8%)
User Interaction
None3 (2.4%)
Unknown81 (64.8%)
Required41 (32.8%)
Privileges Required
Low1 (0.8%)
High0 (0.0%)
None43 (34.4%)
Unknown81 (64.8%)

Top CVEs

Signals from CVEs in this product scope (125 CVEs).

125 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2013-3906HIGH
GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2; Office 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Office Compatibility Pack SP3; and Lync 2010, 2010 Attendee, 2013, and Bas
Nov 6, 20137.897YESYES
CVE-2009-3129HIGH
Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer 2003 SP3; Office Excel Vi
Nov 11, 20097.897YESYES
CVE-2019-0541HIGH
A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML Engine Remote Code Execution Vulnerability." This affects Mic
Jan 8, 20198.892YESYES
CVE-2016-7262HIGH
Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Viewer allow user-assisted remote attackers to exe
Dec 20, 20167.887YESNO
CVE-2009-0238HIGH
Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1; Excel Viewer 2003 Gold and SP3; Excel Viewer; Compatibility Pack for Word, Excel, and PowerPoint 2007 File Format
Feb 25, 20098.886YESNO
CVE-2007-0671HIGH
Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code v
Feb 3, 20078.884YESNO
CVE-2015-2424HIGH
Microsoft PowerPoint 2007 SP3, Word 2007 SP3, PowerPoint 2010 SP2, Word 2010 SP2, PowerPoint 2013 SP1, Word 2013 SP1, and PowerPoint 2013 RT SP1 allow remote attackers to execute a
Jul 14, 20158.882YESNO
CVE-2008-0081CRITICAL
Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via cra
Jan 16, 20089.873NOYES
CVE-2008-0111HIGH
Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2007, Viewer 2003, Compatibility Pack, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitr
Mar 11, 20089.368NOYES
CVE-2011-0978HIGH
Stack-based buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoin
Feb 10, 20119.364NOYES
View all 125 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (125 CVEs).

CISA KEV
7 CVEs
5.6% of CVEs· 97th percentile
Metasploit
2 CVEs
1.6% of CVEs· 96th percentile
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
19 CVEs
15.2% of CVEs· 89th percentile

Social Chatter

Signals from CVEs in this product scope (125 CVEs).

Media Mentions

Signals from CVEs in this product scope (125 CVEs).

Top CNAs Publishing CVEs For Excel Viewer

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
2007187.016.5%21
2003479.028.6%210