← Browse

CVE-2009-0557

Act now ● On CISA KEV — actively exploited

Actively exploited — on the CISA KEV list.

CVSS base
EPSS — probability of exploitation (30 days)
58.6%
99.1th percentile
CISA KEV
Listed
Added 2022-06-08 · patch by 2022-06-22
Weakness / dates
Published — · modified —

Description

Microsoft Office contains an object record corruption vulnerability that allows remote attackers to execute code via a crafted Excel file with a malformed record object.

Official: NVD · CVE.org