CVE-2010-1247

Unspecified vulnerability in Microsoft Office Excel 2002 SP3 allows remote attackers to execute...

9.3 HighPublic exploit

Unspecified vulnerability in Microsoft Office Excel 2002 SP3 allows remote attackers to execute arbitrary code via an Excel file with a malformed RTD (0x813) record that triggers heap corruption, aka "Excel Memory Corruption Vulnerability," a different vulnerability than CVE-2010-0823 and CVE-2010-1249.

Exploit likelihood

22.4%Down 38.6 points since Feb 4, 2022

What each source reports

NVD Score used 9.3

Record: CVE-2010-1247
CVSS 2.0: 9.3 HighAV:N/AC:M/Au:N/C:C/I:C/A:C
Weakness: CWE-94
Updated: 2026-11-02

CVE List No score

Record: CVE-2010-1247
Updated: 2026-11-02

EUVDEUVD-2010-1276 No score

Record: EUVD-2010-1276
Updated: 2026-11-03

GitHub AdvisoriesGHSA-vvj8-288w-f65x No score

Unspecified vulnerability in Microsoft Office Excel 2002 SP3 allows remote attackers to execute...

Record: GHSA-vvj8-288w-f65x
Weakness: CWE-94
Updated: 2026-11-02

Affected products

microsoft excel

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Excel RTD - Memory Corruption	2010-09-10

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2010-1247 is a high vulnerability (CVSS 9.3) in Microsoft Excel, published June 8, 2010. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 22.4%, the 97th percentile. No source names a fixed version.