CVE-2009-0557
CISA KEV
ACT NOW
Priority: 0.00
BB Relevance:
0/100
Published: N/A
Modified: N/A
First seen: 2026-10-29
Status: pending_score
Description
Microsoft Office contains an object record corruption vulnerability that allows remote attackers to execute code via a crafted Excel file with a malformed record object.
CISA Known Exploited Vulnerability
Vendor / Product
Microsoft — Office
Date Added
2022-06-08
Remediation Due
2022-06-22
https://nvd.nist.gov/vuln/detail/CVE-2009-0557
Weakness Classification (1)
Affected Software (14)
| Vendor | Product | Version |
|---|---|---|
| microsoft | office | 2000 |
| microsoft | office | 2003 |
| microsoft | office | 2004 |
| microsoft | office | 2007 |
| microsoft | office | 2007 |
| microsoft | office | 2008 |
| microsoft | office | xp |
| microsoft | office_compatibility_pack | 2007 |
| microsoft | office_compatibility_pack | 2007 |
| microsoft | office_excel_viewer | - |
| microsoft | office_excel_viewer | 2003 |
| microsoft | office_sharepoint_server | 2007 |
| microsoft | office_sharepoint_server | 2007 |
| microsoft | open_xml_file_format_converter | - |
References & Advisories (8)
US Government Resource
Patch
Vendor Advisory
Broken Link
Third Party Advisory
VDB Entry
Broken Link
Third Party Advisory
VDB Entry
Broken Link
Third Party Advisory
US Government Resource
Broken Link
Broken Link
Broken Link