CVE-2012-1887: Use-after-free vulnerability in Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1, and Office 2008 a...

Security readout for executives and security teams

A malicious spreadsheet could cause affected Microsoft Excel or Office for Mac versions to run attacker-controlled code. The business risk is highest where legacy Office versions remain in use or users can open unsolicited spreadsheets. The bundle does not provide a CVSS score or evidence of active exploitation. Exposure is likely limited to organizations still running the named legacy Excel or Office for Mac versions, especially where email attachments, shared drives, or downloads allow spreadsheet opening. Modern versions are not listed in the provided bundle. Prioritize remediation for any remaining legacy Office estate. The impact is code execution from a document, which creates phishing-driven compromise risk, but current exploitation evidence is not supplied. Mitigation focus: Review Microsoft MS12-076 and apply vendor-provided security updates where applicable.; Retire or isolate affected legacy Office versions if updates cannot be applied.; Restrict unsolicited spreadsheet attachments for users on legacy Office builds..

Prepared

Jun 24, 2026, 12:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.