EUVD-2026-60574

Carbone is vulnerable to Denial of Service due to lack of protection against zip bombs when processing .docx files. The library uses yazl for zip decompression without validating entry sizes, allowing an attacker to supply a malicious .docx file containing a zip bomb that decompresses to a...

CVE-2026-18929

Carbone's yazl-based zip decompression of .docx files lacks entry-size validation, enabling zip-bomb attacks that cause excessive memory consumption and server crashes. CVSS 6.9 (MEDIUM). Fixed in versions 3.8.2, 4.26.3, and 5.4.4. No in-the-wild exploitation reported. Details: https://github.com...

CVE-2026-18929 Resource Exhaustion in Carbone

Carbone is vulnerable to Denial of Service due to lack of protection against zip bombs when processing .docx files. The library uses yazl for zip decompression without validating entry sizes, allowing an attacker to supply a malicious .docx file containing a zip bomb that decompresses to a...

CVE-2026-18929 Resource Exhaustion in Carbone

Carbone is vulnerable to Denial of Service due to lack of protection against zip bombs when processing .docx files. The library uses yazl for zip decompression without validating entry sizes, allowing an attacker to supply a malicious .docx file containing a zip bomb that decompresses to a...

CVE-2026-18929: Improper Handling of Highly Compressed Data (Data Amplification)

Carbone is vulnerable to Denial of Service due to lack of protection against zip bombs when processing .docx files. The library uses yazl for zip decompression without validating entry sizes, allowing an attacker to supply a malicious .docx file containing a zip bomb that decompresses to a...

PT-2026-76909

Carbone is vulnerable to Denial of Service due to lack of protection against zip bombs when processing .docx files. The library uses yazl for zip decompression without validating entry sizes, allowing an attacker to supply a malicious .docx file containing a zip bomb that decompresses to a...

com.gitee.dqhm:emmon-util (1.0.2), org.cqfn:reportwine (0.1) +11 more potentially affected by CVE-2026-53752 via org.docx4j:docx4j-core (8.2.9)

org.docx4j:docx4j-core MAVEN version 8.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.docx4j:docx4j-core and may be impacted: - com.gitee.dqhm:emmon-util 1.0.2 - org.cqfn:reportwine 0.1 - org.docx4j:docx4j-conversion-via-microsoft-graph 8.2.9 ...

com.alanpoi:alanpoi-all (>=1.3.4, <=3.0.0), com.alanpoi:alanpoi-analysis (>=1.3.4, <=3.0.0) +10 more potentially affected by CVE-2026-53752 via org.docx4j:docx4j-core (8.3.0)

org.docx4j:docx4j-core MAVEN version 8.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.docx4j:docx4j-core and may be impacted: - com.alanpoi:alanpoi-all =1.3.4, =1.3.4, =3.0.0 - org.docx4j:docx4j-conversion-via-microsoft-graph 8.3.0 -...

com.github.paulcwarren:spring-content-docx4j (>=2.1.0, <=2.3.0), org.docx4j:docx4j-conversion-via-microsoft-graph (8.3.4) +9 more potentially affected by CVE-2026-53752 via org.docx4j:docx4j-core (8.3.4)

org.docx4j:docx4j-core MAVEN version 8.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.docx4j:docx4j-core and may be impacted: - com.github.paulcwarren:spring-content-docx4j =2.1.0, =2.3.0 - org.docx4j:docx4j-conversion-via-microsoft-graph 8.3....

org.docx4j:docx4j-diffx (8.1.0), org.docx4j:docx4j-docx-anon (8.1.0) +4 more potentially affected by CVE-2026-53752 via org.docx4j:docx4j-core (8.1.0)

org.docx4j:docx4j-core MAVEN version 8.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.docx4j:docx4j-core and may be impacted: - org.docx4j:docx4j-diffx 8.1.0 - org.docx4j:docx4j-docx-anon 8.1.0 - org.docx4j:docx4j-export-fo 8.1.0 -...

org.docx4j:docx4j-diffx (8.1.7), org.docx4j:docx4j-docx-anon (8.1.7) +3 more potentially affected by CVE-2026-53752 via org.docx4j:docx4j-core (8.1.7)

org.docx4j:docx4j-core MAVEN version 8.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.docx4j:docx4j-core and may be impacted: - org.docx4j:docx4j-diffx 8.1.7 - org.docx4j:docx4j-docx-anon 8.1.7 - org.docx4j:docx4j-jaxb-internal 8.1.7 -...

pwndoc v1.7.0

PwnDoc PwnDoc is a pentest reporting application making it simple and easy to write your findings and generate a customizable Docx report. The main goal is to have more time to Pwn and less time to Doc by mutualizing data like vulnerabilities between users. Documentation Installation Data Roles...

CVE-2026-65695

Office-Word-MCP-Server through 1.1.11 contains a path traversal vulnerability in its document tools that allows attackers who can influence the filename argument to read arbitrary .docx files or create and overwrite .docx files outside the intended working directory. Attackers can supply absolute...

CVE-2026-65695

The CVE-2026-65695 entry concerns Office-Word-MCP-Server (through version 1.1.11) with a path traversal flaw in document tools. An attacker who can influence the filename argument can read arbitrary .docx files or create/overwrite .docx files outside the intended working directory by supplying ab...

CVE-2026-65695 Office-Word-MCP-Server 1.1.11 Path Traversal via document tools

Office-Word-MCP-Server through 1.1.11 contains a path traversal vulnerability in its document tools that allows attackers who can influence the filename argument to read arbitrary .docx files or create and overwrite .docx files outside the intended working directory. Attackers can supply absolute...

CVE-2026-65695 Office-Word-MCP-Server 1.1.11 Path Traversal via document tools

Office-Word-MCP-Server through 1.1.11 contains a path traversal vulnerability in its document tools that allows attackers who can influence the filename argument to read arbitrary .docx files or create and overwrite .docx files outside the intended working directory. Attackers can supply absolute...

CVE-2026-65695

Office-Word-MCP-Server through 1.1.11 contains a path traversal vulnerability in its document tools that allows attackers who can influence the filename argument to read arbitrary .docx files or create and overwrite .docx files outside the intended working directory. Attackers can supply absolute...

EUVD-2026-48308

Office-Word-MCP-Server through 1.1.11 contains a path traversal vulnerability in its document tools that allows attackers who can influence the filename argument to read arbitrary .docx files or create and overwrite .docx files outside the intended working directory. Attackers can supply absolute...

CVE-2026-65695 Office-Word-MCP-Server 1.1.11 Path Traversal via document tools

Office-Word-MCP-Server through 1.1.11 contains a path traversal vulnerability in its document tools that allows attackers who can influence the filename argument to read arbitrary .docx files or create and overwrite .docx files outside the intended working directory. Attackers can supply absolute...

PT-2026-64026

Office-Word-MCP-Server through 1.1.11 contains a path traversal vulnerability in its document tools that allows attackers who can influence the filename argument to read arbitrary .docx files or create and overwrite .docx files outside the intended working directory. Attackers can supply absolute...