CVE-2009-0238KEV · OVERDUE

Microsoft Office Remote Code Execution

High · published February 25, 2009

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 8.8. It is confirmed in active exploitation. It sits in the 98.7th percentile for exploit probability.

178
days past CISA
deadline
CVSS v3.1
8.8
EPSS
43%
Percentile
98.7
In the wild
Confirmed
What it is

🚨 A crafted Excel document is all it takes for an attacker to unleash chaos on your system! This vulnerability is like a poorly constructed bridge that collapses when a heavy truck passes over — the wrong move can lead to catastrophic failure. An attacker can easily engineer a document that tricks the software into executing their code, causing major damage. An attacker exploiting this flaw can run arbitrary code on your system, potentially gaining access to sensitive data, installing malware, or taking complete control of your machine. If left unaddressed, it could be a gateway for a devastating breach, unraveling your digital defenses!

Put simply

This vulnerability is like a poorly constructed bridge that collapses when a heavy truck passes over — the wrong move can lead to catastrophic failure. An attacker can easily engineer a document that tricks the software into executing their code, causing major damage. This vulnerability exists due to a failure to properly validate an object in Microsoft Excel, allowing an attacker to execute arbitrary code when a victim opens a malicious Excel file.

What to do

An attacker exploiting this flaw can run arbitrary code on your system, potentially gaining access to sensitive data, installing malware, or taking complete control of your machine. If left unaddressed, it could be a gateway for a devastating breach, unraveling your digital defenses! To protect yourself, update to a secure version of Microsoft Office immediately and ensure that all Office applications are patched to the latest security updates. Additionally, consider implementing strict file handling policies to encourage users not to open unknown Excel documents. You've got this! Follow these steps, and you'll be strengthening your defenses in no time! 🛡️

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.42941 · 98.7th percentile
Published
2009-02-25T16:00Z
KEV added
2026-04-14 · due 2026-04-28
EPSS history
Timeline
  • 14 APR 00:00Z
    Added to CISA KEV — remediate by Apr 28
    kev
  • 25 FEB 16:00Z
    Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1; Excel Viewer 2003 Gold and SP3; Excel Viewer; Compatibility Pack for Word, Excel, and…
    cvelistv5