CVE Watch—

CVE-2009-0238

Microsoft Office Remote Code Execution

CVSS

—

Sem CVSS

EPSS

42.9%

p99

KEV

SIM

14 de abr. de 2026

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

42.9%EPSS · 30 dias43.2%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

Microsoft / Office

Vulnerabilidade

Microsoft Office Remote Code Execution

Adicionado ao KEV

14 de abr. de 2026

Corrigir até

28 de abr. de 2026

Uso conhecido em ransomware

Não

Descrição resumida

Microsoft Office Excel contains a remote code execution vulnerability that could allow an attacker to take complete control of an affected system if a user opens a specially crafted Excel file that includes a malformed object.

Ação necessária

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notas

https://learn.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-009 ; https://nvd.nist.gov/vuln/detail/CVE-2009-0238

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2023-217157.3 ALT

96.1%

KEV—79Microsoft Office Publisher Security Feature Bypass Vulnerability78d CVE-2021-422927.8 ALT

98.7%

KEV—80Microsoft Excel Security Feature Bypass78d CVE-2021-386467.8 ALT

94.8%

KEV—78Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability87d CVE-2021-270597.6 ALT

93.4%

KEV—78Microsoft Office Remote Code Execution Vulnerability78d CVE-2017-11882—

100.0%

KEV—80Microsoft Office Memory Corruption Vulnerability—CVE-2015-1641—

99.9%

KEV—80Microsoft Office Memory Corruption Vulnerability—