CVE-2007-0671—Microsoft Office Excel Remote Code Execution Vulnerability

PUBLISHEDvulnerability record

2025-08-12 · last modified August 12, 2025

Metadata

CVE ID:: CVE-2007-0671
Project:: Microsoft
Product:: Office
Date Added:: 2025-08-12
Due Date:: 2025-09-02
Last Updated:: August 12, 2025

Vulnerability Name

Microsoft Office Excel Remote Code Execution Vulnerability

Description

Microsoft Office Excel contains a remote code execution vulnerability that can be exploited when a specially crafted Excel file is opened. This malicious file could be delivered as an email attachment or hosted on a malicious website. An attacker could leverage this vulnerability by creating a specially crafted Excel file, which, when opened, allowing an attacker to execute remote code on the affected system.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:: Unknown

Action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.