Skip to content
COOEY

FAIL › dossier

Excel

PRODUCT

· dossier confidence 20%

Microsoft Excel is a core Microsoft product with a documented history of critical RCE vulnerabilities in its parsing logic, posing significant risk to DIB/CMMC environments.

Failure events
3
Zero-days
0
RCEs
3
On KEV
3
Critical
0
Worst shame
85
PROFILE
CategorySoftware ProductWhat they doMicrosoft Excel is a spreadsheet application developed by Microsoft for data analysis, visualization, and reporting. Websitehttps://www.microsoft.com/en-us/microsoft-365/excel ↗
SECURITY POSTURE

High-profile software with a history of critical RCE vulnerabilities in the Office suite, including Excel, requiring immediate patching.

Notable failures
  • CVE-2009-3129: Remote code execution via FEATHEADER record
  • CVE-2019-1297: Remote code execution via memory object handling
  • CVE-2016-7262: Security feature bypass via improper input handling
Patterns: Repeated unpatched edge-case RCEs in spreadsheet parsing logic
FAILURE HISTORY · 3
DATEEVENTSEVSUMMARY
2022-03-03 CVE-2009-3129 high A remote code execution vulnerability in Microsoft Excel allows attackers to execute arbitrary code via a malicious spreadsheet file.
2022-03-03 CVE-2016-7262 high CVE-2016-7262 in Microsoft Excel allows arbitrary command execution via a security feature bypass.
2022-03-03 CVE-2019-1297 high Microsoft Excel contained an unpatched remote code execution vulnerability that was actively exploited in the wild.
DOSSIER SOURCES
Open questions: Are there any recent data breaches involving Excel users? · What is the current patch status for the 2022 CVEs?
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-07-30 03:44:51.649059+00:00