17-Year-Old Excel Vulnerability Exploited by Cyber Threat Actors
A 17-year-old vulnerability in Microsoft Excel is being actively exploited by cyber threat actors, according to a report by the U.S. Cybersecurity and Infrastructure Security Agency (CISA). The exploit, which allows remote code execution via a crafted Excel document, was initially discovered in 2009 and has a severity score of 8.8. Despite being patched by Microsoft, the vulnerability has resurfaced, prompting CISA to demand a new patch within two weeks. Additionally, a new exploit involving Microsoft Office SharePoint has been identified, with a severity score of 6.5, highlighting ongoing cybersecurity challenges.