Microsoft Office Excel Remote Code Execution Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 12/08/2025. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| access | = 2000= 2002= 2003 | |
| excel | = 2000= 2002= 2003 | |
| excel viewer | = 2003 | |
| frontpage | = 2000= 2002= 2003 | |
| infopath | = 2003 | |
| office | = 2000= 2003= 2004= xp | |
| onenote | = 2003 | |
| outlook | = 2000= 2002= 2003 | |
| powerpoint | = 2000= 2002= 2003 | |
| project | = 2000= 2002= 2003 | |
| publisher | = 2000= 2002= 2003 | |
| visio | = 2002= 2003 | |
| word | = 2000= 2002= 2003 | |
| word viewer | = 2003 |
Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as demonstrated by Exploit-MSExcel.h in targeted zero-day attacks.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free