"An 18-Year-Old Excel Bug Is Attacking Now"... Old Office Users Beware

CISA added the long-old Excel flaw CVE-2009-0238 to its Known Exploited Vulnerabilities list after confirming real-world abuse.

The bug can let attackers achieve remote code execution through malicious files in unsupported versions of Microsoft Office and Excel.

The warning highlights that outdated Office installations remain an active attack surface, especially via phishing attachments.

Organizations using legacy Office should verify exposure, patch or retire affected systems, and review document-based email threats.