漏洞描述 Microsoft Excel是美国微软(Microsoft)公司Office套件中的一款电子表格处理软件。 Microsoft Excel在解析Excel电子表格时没有正确验证记录信息。远程攻击者可利用此漏洞完全控制受影响的系统,并随后安装程序;查看、更改或删除数据;或者创建拥有完全用户权限的新帐户。
相关漏洞推荐 用友NC /portal/pt/infopathimport/importExcelTemplate pageId 文件上传漏洞 (CVE-2025-53770)Microsoft SharePoint Server反序列化漏洞允许远程代码执行 POC 用友NC importExcelTemplate 任意文件上传 POC CVE-2019-0604: Microsoft SharePoint - Remote Code Execution POC CVE-2020-0646: Microsoft .NET Framework - Remote Code Execution POC CVE-2000-0114: Microsoft FrontPage Extensions - Information Disclosure POC CVE-2008-1547: Microsoft OWA Exchange Server 2003 - 'redir.asp' Open Redirection POC CVE-2015-1635: Microsoft Windows 'HTTP.sys' - Remote Code Execution POC CVE-2020-0618: Microsoft SQL Server Reporting Services - Remote Code Execution POC CVE-2020-16952: Microsoft SharePoint - Remote Code Execution POC CVE-2021-26855: Microsoft Exchange Server SSRF Vulnerability POC CVE-2021-31195: Microsoft Exchange Server - Cross-Site Scripting POC CVE-2021-38647: Microsoft Open Management Infrastructure - Remote Code Execution