Heist/ feed

Security feed

advisoryKnown exploited CVECISA Known Exploited Vulnerabilities

Microsoft Excel Featheader Record Memory Corruption Vulnerability

Microsoft Office Excel allows remote attackers to execute arbitrary code via a spreadsheet with a FEATHEADER record containing an invalid cbHdrData size element that affects a pointer offset. CISA required action: Apply updates per vendor instructions.

Announced

ExcelCVE-2009-3129
Structured advisory · Revision 1Original source
Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2009-3129

Excel

Source reference: /product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record
Related CVEs
CVE-2009-3129

Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event
#2866 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement
advisoryKnown exploited CVECISA Known Exploited Vulnerabilities

Microsoft Office Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists when Microsoft Office improperly handles input. An attacker who successfully exploited the vulnerability could execute arbitrary commands. CISA required action: Apply updates per vendor instructions.

Announced

ExcelCVE-2016-7262
Structured advisory · Revision 1Original source
Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2016-7262

Excel

Source reference: /product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record
Related CVEs
CVE-2016-7262

Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event
#2830 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement
advisoryKnown exploited CVECISA Known Exploited Vulnerabilities

Microsoft Excel Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Excel when the software fails to properly handle objects in memory. CISA required action: Apply updates per vendor instructions.

Announced

ExcelCVE-2019-1297
Structured advisory · Revision 1Original source
Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2019-1297

Excel

Source reference: /product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record
Related CVEs
CVE-2019-1297

Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event
#2788 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement