AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2008-4264

HIGH · CVSS 9.3 EPSS 25.54%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2008-12-10 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 9.3. It affects Microsoft, Office. Its EPSS score suggests a 25.5% probability of exploitation in the next 30 days. It may be remotely exploitable.

CVE
CVE-2008-4264
Severity
HIGH
CVSS
9.3
EPSS
25.54%
Microsoft Office

Original NVD Description

Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Excel Viewer 2003 Gold and SP3; Excel Viewer; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1; Office 2004 and 2008 for Mac; and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via a crafted Excel spreadsheet that contains a malformed formula, which triggers "pointer corruption" during the loading of formulas from this spreadsheet, aka "File Format Parsing Vulnerability."