CVE-2009-0238

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

April 15, 2026

Last Seen

April 15, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

CISA Warns of Exploitation of 17-Year-Old Excel Vulnerability72.8

The US Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning regarding active exploitation of CVE-2009-0238, a critical remote code execution vulnerability in Microsoft Excel, first identified in 2009. This vulnerability allows attackers to execute malicious code by convincing...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

CISA Warns of Exploitation of 17-Year-Old Excel Vulnerability

Apr 15·3 sources

Related Entities

Zero-day Exploit Malware Phishing CVE-2026-32201 Mdropper T1203 - Exploitation for Client Execution T1566 - Phishing T1059.005 - Visual Basic Microsoft Excel SharePoint Server Microsoft Office Microsoft SharePoint

CVE-2009-0238

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Public Exploits

CVE Details

Related Clusters (1)

CISA Warns of Exploitation of 17-Year-Old Excel Vulnerability

Related Articles (3)

Ancient Excel bug comes out of retirement for active attacks

Ancient Excel bug comes out of retirement for active attacks

Warning of attacks on 17-year-old Excel vulnerability

Related Entities