Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2026-88154 | 6.5 medium | 1.0% | microsoft, 365_apps, microsoft_365, office_2021 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. | 15 Oct |
| CVE-2026-69922 | 6.5 medium | 1.0% | microsoft, 365_apps, office_2021, office_2024 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. | 14 Oct |
| CVE-2026-88190 | 6.5 medium | 1.0% | microsoft, 365_apps, office_2021, office_2024 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. | 14 Oct |
| CVE-2026-88195 | 6.5 medium | 1.0% | microsoft, 365_apps, office_2021, office_2024 | Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. | 14 Oct |
| CVE-2026-88201 | 6.5 medium | 1.0% | microsoft, 365_apps, office_2021, office_2024 | Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. | 14 Oct |
| CVE-2026-70219 | 6.5 medium | 1.0% | microsoft, 365_apps, office_2021, office_2024 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. | 14 Oct |
| CVE-2026-88151 | 6.5 medium | 1.0% | microsoft, 365_apps, office_2021, office_2024 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. | 14 Oct |
| CVE-2026-88153 | 6.5 medium | 1.0% | microsoft, 365_apps, office_2021, office_2024 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. | 14 Oct |
| CVE-2026-88172 | 6.5 medium | 1.0% | microsoft, 365_apps, office_2021, office_2024 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. | 14 Oct |
| CVE-2026-68799 | 5.5 medium | 1.0% | microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 | Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | 10 h ago |
| CVE-2026-68797 | 5.5 medium | 1.0% | microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | 10 h ago |
| CVE-2026-70318 | 5.5 medium | 1.0% | microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac | Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | 10 h ago |
| CVE-2026-68808 | 5.5 medium | 1.0% | microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | 10 h ago |
| CVE-2026-68802 | 5.5 medium | 1.0% | microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | 10 h ago |
| CVE-2026-55138 | 5.5 medium | 1.0% | microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | 10 h ago |
| CVE-2026-55046 | 5.5 medium | 1.0% | microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | 10 h ago |
| CVE-2026-50408 | 5.5 medium | 1.0% | microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | 10 h ago |
| CVE-2026-48580 | 5.5 medium | 1.0% | microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | 10 h ago |
| CVE-2026-68813 | 5.5 medium | 1.0% | microsoft, 365_apps, microsoft_365, office_2019 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | Sat 24 Oct |
| CVE-2025-54901 | 5.5 medium | 1.0% | microsoft, 365_apps, excel, office | Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | 18 Oct |
| CVE-2025-59240 | 5.5 medium | 1.0% | microsoft, 365_apps, excel, office | Exposure of sensitive information to an unauthorized actor in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | 18 Oct |
| CVE-2026-70214 | 5.5 medium | 1.0% | microsoft, 365_apps, office_2021, office_2024 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | 14 Oct |
| CVE-2026-112248 | 5.1 medium | 1.0% | no CPE yet | A security vulnerability has been detected in grandnode grandnode2 up to 2.3.0. This impacts the function ProductImportDataObject.PrepareProductPictures of the component Excel Import. The manipulation of the argument Picture1/Picture2/Picture3 leads to path traversal. The attack can be initiated remotely. Upgrading to version 2.4.0 will fix this issue. The identifier of the patch is 2abbaed232080ad74949c6f35581f0351e309972. It is suggested to upgrade the affected component. The vendor was contacted early about this disclosure. | 19 Oct |
| CVE-2026-15160 | 4.3 medium | 1.0% | no CPE yet | The Ninja Forms - Excel Export plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.3.6 via the 'spreadsheet_export_tmp_name' parameter. This makes it possible for authenticated attackers, with subscriber-level access and above, to write .xls/.xlsx files to arbitrary locations on the server, which can be used to stage further attacks. | Sat 24 Oct |
| CVE-2025-60728 | 4.3 medium | 1.0% | microsoft, 365_apps, office_long_term_servicing_channel | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. | 18 Oct |
| CVE-2026-40576 | 9.4 critical | 0.00% | no CPE yet | excel-mcp-server is a Model Context Protocol server for Excel file manipulation. A path traversal vulnerability exists in excel-mcp-server versions up to and including 0.1.7. When running in SSE or Streamable-HTTP transport mode (the documented way to use this server remotely), an unauthenticated attacker on the network can read, write, and overwrite arbitrary files on the host filesystem by supplying crafted filepath arguments to any of the 25 exposed MCP tool handlers. The server is intended to confine file operations to a directory set by the EXCEL_FILES_PATH environment variable. The function responsible for enforcing this boundary — get_excel_path() — fails to do so due to two independent flaws: it passes absolute paths through without any check, and it joins relative paths without resolving or validating the result. Combined with zero authentication on the default network-facing transport and a default bind address of 0.0.0.0 (all interfaces), this allows trivial remote exploitation. This vulnerability is fixed in 0.1.8. | Mon 26 Oct |
| CVE-2026-107211 | 8.7 high | 0.00% | excelize | Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.8.1 to 2.11.0, separately parsed pivot-table field indices are used to index the pivot-cache field-name slice without bounds checks. extractPivotTableFields uses getPivotCacheFieldsName output while processing GetPivotTables and trusts the dataField fld attribute as an index. When a crafted workbook supplies a pivot-field count mismatch or an out-of-range dataField fld value before GetPivotTables is called, the unchecked index causes a Go slice-bounds panic that escapes the library, allowing an attacker to crash the process or request worker. No fixed version is available as of this review. | 13 Oct |
| CVE-2026-107213 | 8.7 high | 0.00% | excelize | Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.9.0 to 2.11.0, GetSlicers checks for ExtLst but dereferences ws.Drawing without checking whether the independently optional drawing element exists. File.GetSlicers reads ws.Drawing.RID after seeing a worksheet extLst element even when the independently optional worksheet drawing element is absent. When a crafted worksheet contains an extLst element without a drawing element and the application calls GetSlicers, the nil ws.Drawing pointer is dereferenced while resolving the drawing relationship, allowing an attacker to panic and terminate an unprotected process. No fixed version is available as of this review. | 13 Oct |
| CVE-2025-12384 | 8.6 high | 0.00% | no CPE yet | The Document Embedder – Embed PDFs, Word, Excel, and Other Files plugin for WordPress is vulnerable to unauthorized access/modification/loss of data in all versions up to, and including, 2.0.0. This is due to the plugin not properly verifying that a user is authorized to perform an action in the "bplde_save_document_library", "bplde_get_all", "bplde_get_single", and "bplde_delete_document_library" functions. This makes it possible for unauthenticated attackers to create, read, update, and delete arbitrary document_library posts. | 18 Oct |
| CVE-2026-71042 | 8.1 high | 0.00% | oracle, agile_product_lifecycle_management | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: PGC / Excel Plugin). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Agile PLM accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Agile PLM. CVSS 3.1 Base Score 8.1 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H). | Thu 22 Oct |
| CVE-2026-68807 | 7.8 high | 0.00% | microsoft, 365_apps, excel, microsoft_365 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 10 h ago |
| CVE-2026-68817 | 7.8 high | 0.00% | microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 10 h ago |
| CVE-2026-68814 | 7.8 high | 0.00% | microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 10 h ago |
| CVE-2026-68812 | 7.8 high | 0.00% | microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 10 h ago |
| CVE-2026-68805 | 7.8 high | 0.00% | microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 10 h ago |
| CVE-2026-68804 | 7.8 high | 0.00% | microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 | Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 10 h ago |
| CVE-2026-68803 | 7.8 high | 0.00% | microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 | Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 10 h ago |
| CVE-2026-68801 | 7.8 high | 0.00% | microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 10 h ago |
| CVE-2026-68816 | 7.8 high | 0.00% | microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 10 h ago |
| CVE-2026-68815 | 7.8 high | 0.00% | microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 10 h ago |
| CVE-2026-68811 | 7.8 high | 0.00% | microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 | Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 10 h ago |
| CVE-2026-68810 | 7.8 high | 0.00% | microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 10 h ago |
| CVE-2026-68806 | 7.8 high | 0.00% | microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 | Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 10 h ago |
| CVE-2026-68796 | 7.8 high | 0.00% | microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 10 h ago |
| CVE-2026-68795 | 7.8 high | 0.00% | microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 10 h ago |
| CVE-2026-68794 | 7.8 high | 0.00% | microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 10 h ago |
| CVE-2026-68793 | 7.8 high | 0.00% | microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 10 h ago |
| CVE-2026-56156 | 7.8 high | 0.00% | microsoft, microsoft 365 apps for enterprise, microsoft office 365 for mac, microsoft office ltsc 2021 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 10 h ago |
| CVE-2026-55949 | 7.8 high | 0.00% | microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 | Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 10 h ago |
| CVE-2026-55947 | 7.8 high | 0.00% | microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 10 h ago |
Download these 223 as CSV · subscribe to this list.
EPSS scores: 2026-10-28. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.