VDB

CVE-2024-49069

CVE-2024-49069 PUBLISHED CVSS 7.8 HIGH

Microsoft Excel Remote Code Execution Vulnerability

Reported by microsoft · Published December 10, 2024

Microsoft Excel Remote Code Execution Vulnerability

Risk scores

CVSS 3.1
7.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Affected products

VendorProductVersions
MicrosoftMicrosoft 365 Apps for Enterprise16.0.1
MicrosoftMicrosoft Excel 201616.0.0.0
MicrosoftMicrosoft Office 201919.0.0
MicrosoftMicrosoft Office LTSC 202116.0.1
MicrosoftMicrosoft Office LTSC 20241.0.0
MicrosoftMicrosoft Office LTSC for Mac 202116.0.1
MicrosoftMicrosoft Office LTSC for Mac 20241.0.0
microsoftoffice19.0.0
MicrosoftMicrosoft Office LTSC for Mac 20241.0.0
MicrosoftMicrosoft Office LTSC 202116.0.1
MicrosoftMicrosoft Office 201919.0.0
MicrosoftMicrosoft Excel 201616.0.0.0
MicrosoftMicrosoft Office LTSC 20241.0.0
microsoftoffice_long_term_servicing_channel1.0.0, 16.0.1, 16.0.1
microsoftexcel16.0.0.0
MicrosoftMicrosoft Office LTSC for Mac 202116.0.1
MicrosoftMicrosoft 365 Apps for Enterprise16.0.1
microsoft365_apps16.0.1

Timeline

  • Dec 10, 2024 CVE Published
  • Dec 10, 2024 PoC Published (4 in total, the first dated here)
  • Dec 11, 2024 EPSS Score (30 in total, the first dated here)
  • Feb 26, 2025 Coalition ESS Score (7 in total, the first dated here)
  • Mar 11, 2026 Security Advisory (9 in total, the first dated here)

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2024-49069
vulnetix vdb fixes CVE-2024-49069

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2024-49069/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›