CVE Catalog

CVE-1999-0794

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
1.48%

71th percentile - higher than 71% of all known CVEs

Summary

Microsoft Excel does not warn a user when a macro is present in a Symbolic Link (SYLK) format file.

Risk Assessment

The lack of a warning may lead to the unintentional execution of malicious macros, posing a risk to user data security.

Recommendation

Users are advised to be cautious when opening SYLK files and to enable macro security settings in Excel.

Original NVD description (English source)

Microsoft Excel does not warn a user when a macro is present in a Symbolic Link (SYLK) format file.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS