CVE Watch—

CVE-2009-0557

Microsoft Office Object Record Corruption Vulnerability

CVSS

—

No CVSS

EPSS

58.6%

p99

KEV

YES

Jun 8, 2022

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

58.6%EPSS · 30 days58.6%

2026-08-022026-08-31

KEV catalog record

Product

Microsoft / Office

Vulnerability

Microsoft Office Object Record Corruption Vulnerability

Added to KEV

Jun 8, 2022

Remediate by

Jun 22, 2022

Known ransomware use

Summary description

Microsoft Office contains an object record corruption vulnerability that allows remote attackers to execute code via a crafted Excel file with a malformed record object.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2009-0557

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2023-217157.3 HIG

95.8%

KEV—79Microsoft Office Publisher Security Feature Bypass Vulnerability12d CVE-2021-422927.8 HIG

98.6%

KEV—80Microsoft Excel Security Feature Bypass12d CVE-2021-386467.8 HIG

94.3%

KEV—78Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability21d CVE-2021-270597.6 HIG

92.9%

KEV—78Microsoft Office Remote Code Execution Vulnerability12d CVE-2017-11882—

100.0%

KEV—80Microsoft Office Memory Corruption Vulnerability—CVE-2023-23397—

99.9%

KEV—80Microsoft Office Outlook Privilege Escalation Vulnerability—