EXPOSURES › CVE-2009-0557
CVE-2009-0557
HIGH ⌖ ON CISA KEV · EXPLOITEDA malformed Excel file could trigger remote code execution in Microsoft Office via an object record corruption flaw.
An unpatched vulnerability in Microsoft Office allowed attackers to execute arbitrary code by sending a specially crafted Excel file. DIB organizations must ensure Office is patched and restricted, as this flaw was actively exploited in the wild and represents a classic unpatched RCE risk.
Shame score — Microsoft shipped a known, actively exploited RCE flaw for years without adequate patching or mitigation guidance, enabling widespread remote code execution.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
Microsoft Office contains an object record corruption vulnerability that allows remote attackers to execute code via a crafted Excel file with a malformed record object.
| PRODUCT | STATUS |
|---|---|
| Azure Commercial Cloud Microsoft |
Authorized |
| Azure Government (includes Dynamics 365) Microsoft |
Authorized |
| Microsoft Office 365 GCC High Microsoft |
In Process |
| Office 365 Multi-Tenant & Supporting Services Microsoft |
Authorized |