CVE-2026-3664

creationtimestamp| type| source ---|---|--- 2026-03-07 17:24:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgidrycgsk2n...

CVE-2026-3664

Affected product: xlnt-community xlnt (up to 1.6.1). Vulnerable component: xlnt::detail::compound_document::read_directory in source/detail/cryptography/compound_document.cpp of the Encrypted XLSX File Parser. Issue type: out-of-bounds read caused by manipulation, with local execution requirement...