Ancient Excel bug comes out of retirement for active attacks
ID: ac926a6b-ce9b-530e-971c-0774e3cc6b69
STIX ID: report--ac926a6b-ce9b-530e-971c-0774e3cc6b69
Feed Name: The Register (Security)
Threat Score
CISA added a 17‑year‑old critical Excel RCE (CVE-2009-0238) to its Known Exploited Vulnerabilities catalog after confirming active exploitation and also listed a recently exploited SharePoint spoofing zero‑day (CVE-2026-32201); Microsoft advisories, the historical connection of the Excel bug to Trojan.Mdropper.AC, and CISA's accelerated two‑week patch deadline for federal agencies are highlighted.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.