Excel

by Microsoft

Take action — actively targeted

Excel is actively targeted by attackers. A significant proportion of its known vulnerabilities are being exploited.

What to do
  1. Apply all available updates immediately
  2. Review your exposure — is this internet-facing?
  3. Monitor vendor advisories for this product

What Attackers Target

Vulnerabilities with high exploit probability 48.3%
Confirmed actively exploited (CISA) 2.1%
Public exploit code available 1.3%
Based on 234 known vulnerabilities. Percentages show the proportion that are actively dangerous — a low percentage means most vulnerabilities in this product are not being exploited.

Most Dangerous Vulnerabilities

CVE CVSS Exploit Probability Confirmed
CVE-2009-3129 7.8 91.2% Yes
CVE-2016-7262 7.8 87.1% Yes
CVE-2008-0081 9.8 81.8%
CVE-2010-0258 7.8 71.4%
CVE-2007-0671 8.8 66.8% Yes
CVE-2017-11884 7.8 49.9%
CVE-2017-0194 5.5 44.2%
CVE-2016-7236 7.8 44.1%
CVE-2021-31178 5.5 41.9%
CVE-2019-1297 8.8 40.7% Yes
CVE-2016-0136 7.8 40.6%
CVE-2023-32029 7.8 40.3%
CVE-2016-0122 7.8 39.9%
CVE-2019-1331 8.8 38.3%
CVE-2019-1448 7.8 38.0%
CVE-2018-8375 7.8 37.4%
CVE-2018-1029 7.8 37.4%
CVE-2018-1027 7.8 37.4%
CVE-2023-33133 7.8 37.2%
CVE-2017-8510 8.8 36.4%
52
/ 100
high-risk
Active Threat 50/50 · Critical
Exploit Availability 2/50 · Minimal

Score uses Wilson score intervals to account for sample size. Products with few CVEs are scored conservatively.