What’s Vulnerable › Vulnerabilities

CVE-2014-6361

• Severity: critical (CVSS 9.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 13.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-12-11 · updated 2026-06-17
• Weakness: CWE-94

Description

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 Gold and SP1, Excel 2013 RT Gold and SP1, and Office Compatibility Pack allow remote attackers to execute arbitrary code via a crafted Office document, aka "Excel Invalid Pointer Remote Code Execution Vulnerability."

Affected products

• Microsoft Excel 2013 Service Pack 1: 2007-sp3, 2010-sp2, 2013, 2013-sp1
• Microsoft Office Compatibility Pack: all versions

References

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-083
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-083

Get alerted when CVE-2014-6361 or the next vulnerability affects your stack