Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.
| CVE | Vendor | Product | Added | Due | Status |
|---|---|---|---|---|---|
|
CVE-2009-3129 — Microsoft Excel Featheader Record Memory Corruption Vulnerability
Microsoft Office Excel allows remote attackers to execute arbitrary code via a spreadsheet with a FEATHEADER record containing an invalid cbHdrData size element that affects a pointer offset.
|
Microsoft | Excel | Mar 3, 2022 | Mar 24, 2022 | |
|
CVE-2016-7262 — Microsoft Office Security Feature Bypass Vulnerability
A security feature bypass vulnerability exists when Microsoft Office improperly handles input. An attacker who successfully exploited the vulnerability could execute arbitrary commands.
|
Microsoft | Excel | Mar 3, 2022 | Mar 24, 2022 | |
|
CVE-2019-1297 — Microsoft Excel Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Microsoft Excel when the software fails to properly handle objects in memory.
|
Microsoft | Excel | Mar 3, 2022 | Mar 17, 2022 |
Microsoft Office Excel allows remote attackers to execute arbitrary code via a spreadsheet with a FEATHEADER record containing an invalid cbHdrData size element that affects a pointer offset.
Excel · Mar 3, 2022
A security feature bypass vulnerability exists when Microsoft Office improperly handles input. An attacker who successfully exploited the vulnerability could execute arbitrary commands.
Excel · Mar 3, 2022
A remote code execution vulnerability exists in Microsoft Excel when the software fails to properly handle objects in memory.
Excel · Mar 3, 2022