Navigation
← Menace / CVE-2007-0671
CVE-2007-0671 Élevée

Microsoft Office Excel Remote Code Execution Vulnerability.

Microsoft · Office

Exploitabilité (EPSS)
43.2 %
percentile mondial 99
Sévérité (CVSS)
8.8
CVSS v3.1
Ajoutée au KEV
12 août 2025
échéance CISA · 02 sept. 2025
Description

Microsoft Office Excel contains a remote code execution vulnerability that can be exploited when a specially crafted Excel file is opened. This malicious file could be delivered as an email attachment or hosted on a malicious website. An attacker could leverage this vulnerability by creating a specially crafted Excel file, which, when opened, allowing an attacker to execute remote code on the affected system.

Action requise (CISA)

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Signal de priorisation (d’inspiration SSVC)
Examiner rapidement
Exploitation
Active (catalogue KEV)
Automatisable
Non
Impact technique
Total

Une orientation, pas une décision : le 4ᵉ facteur SSVC (impact mission/société) dépend du contexte de votre organisation. Méthode ↗

Autres vulnérabilités exploitées · Microsoft
CVE-2021-34473 100% CVE-2019-0708 100% CVE-2015-1635 100% CVE-2025-53770 100% CVE-2021-26855 100% CVE-2025-49704 100%
NVD ↗ CVE.org ↗ CISA KEV ↗