Is CVE-2014-6361 being actively exploited?

CVE-2014-6361 is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

What is the CVSS score for CVE-2014-6361?

CVE-2014-6361 has a CVSS 2.0 base score of 9.3 (HIGH).

CVE-2014-6361

HIGH · CVSS 9.3EPSS 13.4%EU EUVD

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 Gold and SP1, Excel 2013 RT Gold and SP1, and Office Compatibility Pack allow remote attackers to execute arbitrary code via a crafted Office document, aka "Excel Invalid Pointer Remote Code Execution Vulnerability."

Key facts

CVSS score: 9.3 (v2.0)
Severity: HIGH
CVSS vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Weakness (CWE): CWE-94
EPSS score: 13.4% (96th percentile)
In CISA KEV: No
In EU EUVD: Yes (EUVD-2014-6245)
Published: December 11, 2014
NVD last modified: June 17, 2026
Status: Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2014-6245 in the EU Vulnerability Database. Last updated in EUVD on August 6, 2024.

View on the EU Vulnerability Database

Affected products

microsoft / excel
microsoft / excel
microsoft / excel
microsoft / excel
microsoft / excel
microsoft / office compatibility pack

References

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-083

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain