CVE-2023-33158
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk45th percentile - higher than 45% of all known CVEs
Summary
A vulnerability in Microsoft Excel allows for remote code execution. An attacker can exploit this flaw to execute malicious code on the victim's system by using a specially crafted Excel file.
Risk Assessment
Organizations may be exposed to remote attacks that could lead to data loss or system takeover. Specifically, users opening infected files may become targets of attacks.
Recommendation
It is recommended to update Microsoft Excel to the latest version to patch this vulnerability. Additionally, users should exercise caution when opening files from unknown sources.
Other vulnerabilities in Microsoft Excel
See all- CVE-2024-26257High
A vulnerability in Microsoft Excel allows for remote code execution, potentially leading to unauthorized access to the user's system. An attacker can exploit this flaw to execute malicious code on the compromised device.
- CVE-2023-23398High
A vulnerability in Microsoft Excel allows for spoofing, which may lead to unauthorized access to user data. An attacker can exploit this flaw to mislead the user into opening a malicious file.
- CVE-2022-29109High
A vulnerability in Microsoft Excel allows for remote code execution, potentially leading to unauthorized access to the user's system. An attacker can exploit this flaw to run malicious software on the infected device.
- CVE-2022-26901High
A vulnerability in Microsoft Excel allows for remote code execution. An attacker can exploit this flaw to execute malicious code on the victim's system.
- CVE-2022-24473High
A vulnerability in Microsoft Excel allows for remote code execution. An attacker can exploit this flaw to execute malicious code on the victim's system.
- CVE-2022-21841High
A vulnerability in Microsoft Excel allows for remote code execution. An attacker can exploit this flaw to take control of the victim's system.
- CVE-2021-43256High
A vulnerability in Microsoft Excel allows for remote code execution. An attacker can exploit this flaw to take control of the victim's system.
- CVE-2023-33133High
A vulnerability in Microsoft Excel allows for remote code execution, potentially leading to unauthorized access to the user's system. An attacker can exploit this flaw through malicious Excel files.
- CVE-2021-42292HighActively exploited
Microsoft Excel Security Feature Bypass Vulnerability. Details are not provided in the description, but it allows an attacker to bypass security features.
- CVE-2021-38655High
Vulnerability in Microsoft Excel allows remote code execution. An attacker could exploit it to run arbitrary code on the victim's system.
Original NVD description (English source)
Microsoft Excel Remote Code Execution Vulnerability