← All Advisories

CVE-2009-0238: Microsoft Office Remote Code

Status: KEV  |  Advisory ID: CVE-2009-0238

Key Details

CVECVE-2009-0238
Affected productsMicrosoft Office
Exploitation statusListed in CISA's Known Exploited Vulnerabilities (KEV) catalog, indicating confirmed active exploitation.
Classified asCWE-94 (Improper Control of Generation of Code ('Code Injection'))
KEV listingAdded to CISA's Known Exploited Vulnerabilities (KEV) catalog on 2026-04-14.
Exploitation prediction (EPSS)43% probability of exploitation in the next 30 days (99% percentile) -- FIRST.org's EPSS model.
Federal remediation deadline2026-04-28 (CISA KEV, Binding Operational Directive).

What to Know

Microsoft Office Excel contains a remote code execution vulnerability that could allow an attacker to take complete control of an affected system if a user opens a specially crafted Excel file that includes a malformed object.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2009-0238