{"schema_version":"2","view":"grouped","data":[{"id":2861,"cve_ids":["CVE-2009-3129"],"payload":{"kind":"advisory","title":"Microsoft Excel Featheader Record Memory Corruption Vulnerability","summary":"Microsoft Office Excel allows remote attackers to execute arbitrary code via a spreadsheet with a FEATHEADER record containing an invalid cbHdrData size element that affects a pointer offset. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2009-3129","products":[{"name":{"value":"Excel","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2009-3129","aliases":["CVE-2009-3129"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-94"],"cveID":"CVE-2009-3129","notes":"https://nvd.nist.gov/vuln/detail/CVE-2009-3129","dueDate":"2022-03-24","product":"Excel","dateAdded":"2022-03-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Office Excel allows remote attackers to execute arbitrary code via a spreadsheet with a FEATHEADER record containing an invalid cbHdrData size element that affects a pointer offset.","vulnerabilityName":"Microsoft Excel Featheader Record Memory Corruption Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2009-3129","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:d34ef3d2-bed0-4298-a51e-e42de2527db0","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2009-3129","advisory_id":"d34ef3d2-bed0-4298-a51e-e42de2527db0","event_types":["advisory"],"published_at":"2026-10-24T21:25:54.42497+00:00","technologies":["core-kev","excel"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-03T00:00:00+00:00","detail_url":"/advisories/advisory%3Ad34ef3d2-bed0-4298-a51e-e42de2527db0","group":{"id":"advisory:d34ef3d2-bed0-4298-a51e-e42de2527db0","revision":1,"primary_event_id":2866,"change":"published","superseded_by":[],"changed":{"id":2866,"cve_ids":["CVE-2009-3129"],"payload":{"kind":"advisory","title":"Microsoft Excel Featheader Record Memory Corruption Vulnerability","summary":"Microsoft Office Excel allows remote attackers to execute arbitrary code via a spreadsheet with a FEATHEADER record containing an invalid cbHdrData size element that affects a pointer offset. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2009-3129","products":[{"name":{"value":"Excel","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2009-3129","aliases":["CVE-2009-3129"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-94"],"cveID":"CVE-2009-3129","notes":"https://nvd.nist.gov/vuln/detail/CVE-2009-3129","dueDate":"2022-03-24","product":"Excel","dateAdded":"2022-03-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Office Excel allows remote attackers to execute arbitrary code via a spreadsheet with a FEATHEADER record containing an invalid cbHdrData size element that affects a pointer offset.","vulnerabilityName":"Microsoft Excel Featheader Record Memory Corruption Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2009-3129","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:d34ef3d2-bed0-4298-a51e-e42de2527db0","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2009-3129","advisory_id":"d34ef3d2-bed0-4298-a51e-e42de2527db0","event_types":["advisory"],"published_at":"2026-10-24T21:25:54.42497+00:00","technologies":["core-kev","excel"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-03T00:00:00+00:00","detail_url":"/events/2866"},"members":[{"id":2866,"cve_ids":["CVE-2009-3129"],"payload":{"kind":"advisory","title":"Microsoft Excel Featheader Record Memory Corruption Vulnerability","summary":"Microsoft Office Excel allows remote attackers to execute arbitrary code via a spreadsheet with a FEATHEADER record containing an invalid cbHdrData size element that affects a pointer offset. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2009-3129","products":[{"name":{"value":"Excel","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2009-3129","aliases":["CVE-2009-3129"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-94"],"cveID":"CVE-2009-3129","notes":"https://nvd.nist.gov/vuln/detail/CVE-2009-3129","dueDate":"2022-03-24","product":"Excel","dateAdded":"2022-03-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Office Excel allows remote attackers to execute arbitrary code via a spreadsheet with a FEATHEADER record containing an invalid cbHdrData size element that affects a pointer offset.","vulnerabilityName":"Microsoft Excel Featheader Record Memory Corruption Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2009-3129","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:d34ef3d2-bed0-4298-a51e-e42de2527db0","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2009-3129","advisory_id":"d34ef3d2-bed0-4298-a51e-e42de2527db0","event_types":["advisory"],"published_at":"2026-10-24T21:25:54.42497+00:00","technologies":["core-kev","excel"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-03T00:00:00+00:00","detail_url":"/events/2866"}]}},{"id":2823,"cve_ids":["CVE-2016-7262"],"payload":{"kind":"advisory","title":"Microsoft Office Security Feature Bypass Vulnerability","summary":"A security feature bypass vulnerability exists when Microsoft Office improperly handles input. An attacker who successfully exploited the vulnerability could execute arbitrary commands. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2016-7262","products":[{"name":{"value":"Excel","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2016-7262","aliases":["CVE-2016-7262"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-20"],"cveID":"CVE-2016-7262","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-7262","dueDate":"2022-03-24","product":"Excel","dateAdded":"2022-03-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"A security feature bypass vulnerability exists when Microsoft Office improperly handles input. An attacker who successfully exploited the vulnerability could execute arbitrary commands.","vulnerabilityName":"Microsoft Office Security Feature Bypass Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2016-7262","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:cc04c484-3f94-4013-a001-72c4c68f47e7","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-7262","advisory_id":"cc04c484-3f94-4013-a001-72c4c68f47e7","event_types":["advisory"],"published_at":"2026-10-24T21:25:27.391431+00:00","technologies":["core-kev","excel"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-03T00:00:00+00:00","detail_url":"/advisories/advisory%3Acc04c484-3f94-4013-a001-72c4c68f47e7","group":{"id":"advisory:cc04c484-3f94-4013-a001-72c4c68f47e7","revision":1,"primary_event_id":2830,"change":"published","superseded_by":[],"changed":{"id":2830,"cve_ids":["CVE-2016-7262"],"payload":{"kind":"advisory","title":"Microsoft Office Security Feature Bypass Vulnerability","summary":"A security feature bypass vulnerability exists when Microsoft Office improperly handles input. An attacker who successfully exploited the vulnerability could execute arbitrary commands. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2016-7262","products":[{"name":{"value":"Excel","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2016-7262","aliases":["CVE-2016-7262"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-20"],"cveID":"CVE-2016-7262","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-7262","dueDate":"2022-03-24","product":"Excel","dateAdded":"2022-03-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"A security feature bypass vulnerability exists when Microsoft Office improperly handles input. An attacker who successfully exploited the vulnerability could execute arbitrary commands.","vulnerabilityName":"Microsoft Office Security Feature Bypass Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2016-7262","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:cc04c484-3f94-4013-a001-72c4c68f47e7","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-7262","advisory_id":"cc04c484-3f94-4013-a001-72c4c68f47e7","event_types":["advisory"],"published_at":"2026-10-24T21:25:27.391431+00:00","technologies":["core-kev","excel"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-03T00:00:00+00:00","detail_url":"/events/2830"},"members":[{"id":2830,"cve_ids":["CVE-2016-7262"],"payload":{"kind":"advisory","title":"Microsoft Office Security Feature Bypass Vulnerability","summary":"A security feature bypass vulnerability exists when Microsoft Office improperly handles input. An attacker who successfully exploited the vulnerability could execute arbitrary commands. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2016-7262","products":[{"name":{"value":"Excel","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2016-7262","aliases":["CVE-2016-7262"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-20"],"cveID":"CVE-2016-7262","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-7262","dueDate":"2022-03-24","product":"Excel","dateAdded":"2022-03-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"A security feature bypass vulnerability exists when Microsoft Office improperly handles input. An attacker who successfully exploited the vulnerability could execute arbitrary commands.","vulnerabilityName":"Microsoft Office Security Feature Bypass Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2016-7262","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:cc04c484-3f94-4013-a001-72c4c68f47e7","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-7262","advisory_id":"cc04c484-3f94-4013-a001-72c4c68f47e7","event_types":["advisory"],"published_at":"2026-10-24T21:25:27.391431+00:00","technologies":["core-kev","excel"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-03T00:00:00+00:00","detail_url":"/events/2830"}]}},{"id":2781,"cve_ids":["CVE-2019-1297"],"payload":{"kind":"advisory","title":"Microsoft Excel Remote Code Execution Vulnerability","summary":"A remote code execution vulnerability exists in Microsoft Excel when the software fails to properly handle objects in memory. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2019-1297","products":[{"name":{"value":"Excel","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2019-1297","aliases":["CVE-2019-1297"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2019-1297","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-1297","dueDate":"2022-03-17","product":"Excel","dateAdded":"2022-03-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"A remote code execution vulnerability exists in Microsoft Excel when the software fails to properly handle objects in memory.","vulnerabilityName":"Microsoft Excel Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2019-1297","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:a5ca286a-aefb-46a3-b4e1-9fe8f3bd94cf","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1297","advisory_id":"a5ca286a-aefb-46a3-b4e1-9fe8f3bd94cf","event_types":["advisory"],"published_at":"2026-10-24T21:24:12.487811+00:00","technologies":["core-kev","excel"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-03T00:00:00+00:00","detail_url":"/advisories/advisory%3Aa5ca286a-aefb-46a3-b4e1-9fe8f3bd94cf","group":{"id":"advisory:a5ca286a-aefb-46a3-b4e1-9fe8f3bd94cf","revision":1,"primary_event_id":2788,"change":"published","superseded_by":[],"changed":{"id":2788,"cve_ids":["CVE-2019-1297"],"payload":{"kind":"advisory","title":"Microsoft Excel Remote Code Execution Vulnerability","summary":"A remote code execution vulnerability exists in Microsoft Excel when the software fails to properly handle objects in memory. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2019-1297","products":[{"name":{"value":"Excel","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2019-1297","aliases":["CVE-2019-1297"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2019-1297","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-1297","dueDate":"2022-03-17","product":"Excel","dateAdded":"2022-03-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"A remote code execution vulnerability exists in Microsoft Excel when the software fails to properly handle objects in memory.","vulnerabilityName":"Microsoft Excel Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2019-1297","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:a5ca286a-aefb-46a3-b4e1-9fe8f3bd94cf","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1297","advisory_id":"a5ca286a-aefb-46a3-b4e1-9fe8f3bd94cf","event_types":["advisory"],"published_at":"2026-10-24T21:24:12.487811+00:00","technologies":["core-kev","excel"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-03T00:00:00+00:00","detail_url":"/events/2788"},"members":[{"id":2788,"cve_ids":["CVE-2019-1297"],"payload":{"kind":"advisory","title":"Microsoft Excel Remote Code Execution Vulnerability","summary":"A remote code execution vulnerability exists in Microsoft Excel when the software fails to properly handle objects in memory. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2019-1297","products":[{"name":{"value":"Excel","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2019-1297","aliases":["CVE-2019-1297"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2019-1297","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-1297","dueDate":"2022-03-17","product":"Excel","dateAdded":"2022-03-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"A remote code execution vulnerability exists in Microsoft Excel when the software fails to properly handle objects in memory.","vulnerabilityName":"Microsoft Excel Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2019-1297","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:a5ca286a-aefb-46a3-b4e1-9fe8f3bd94cf","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1297","advisory_id":"a5ca286a-aefb-46a3-b4e1-9fe8f3bd94cf","event_types":["advisory"],"published_at":"2026-10-24T21:24:12.487811+00:00","technologies":["core-kev","excel"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-03T00:00:00+00:00","detail_url":"/events/2788"}]}}],"next_after":2861,"next_before":2781}