9732 matches found
CVE-2026-19360
CVE-2026-19360 affects wongcyrus ExcelLexBot (versions up to 0.0.3) via the ExcelLexBotS3TriggerFunction in the Lambda Function Handler. The root cause is improper privilege management, with a remote-compatible attack vector described in the entry. The vulnerability impacts products that are no l...
CLSA-2026-1779151612 TuxCare security update for com.github.pjfanning:excel-streaming-reader (2 CVEs)
TuxCare rebuilt com.github.pjfanning:excel-streaming-reader to address 2 CVEs. Fixed in 5.0.2-tuxcare.1...
CLSA-2026-1771978233 TuxCare security update for xlsx (2 CVEs)
TuxCare rebuilt xlsx to address 2 CVEs. Fixed in 0.18.5-tuxcare.1...
EUVD-2026-52536
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
CVE-2026-62870
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
PT-2026-91809
TuxCare rebuilt com.github.pjfanning:excel-streaming-reader to address 2 CVEs. Fixed in 5.0.2-tuxcare.1...
CVE-2026-62870 Microsoft Excel Remote Code Execution Vulnerability
...
CVE-2026-62870
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
CVE-2026-62870 Microsoft Excel Remote Code Execution Vulnerability
...
CVE-2026-62870
CVE-2026-62870 describes a use-after-free in Microsoft Excel that could allow a remote attacker to execute code over a network. The issue has a high impact (C/H/I/A) with network-based, low-attack-complexity exploitation and requires user interaction. Microsoft has published a security update (KB...
CVE-2026-62870: Use After Free
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
Microsoft Excel Remote Code Execution Vulnerability
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
PT-2026-67554
Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description A use after free issue in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. Use after free is a memory corruption flaw that occurs when an...
Vulnerability of Microsoft Excel, Microsoft Office, Microsoft 365 Apps for Enterprise, and Microsoft Office Online Server packages, related to buffer overflow in the stack, allows attackers to execute arbitrary code.
The vulnerability of Microsoft Excel, Microsoft Office, Microsoft 365 Apps for Enterprise, and Microsoft Office Online Server programs is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
CVE-2026-59933
PhpSpreadsheet is affected by a memory-exhaustion denial-of-service in the OLERead::read() path when parsing attacker-controlled XLS/OLE metadata. The vulnerability stems from an unguarded sector-chain walk in the OLE reader that can loop indefinitely (self-loop in small-block depot/sector chains...
Уязвимость пакетов программ Microsoft Office, Excel и 365 Apps for Enterprise, позволяющая нарушителю раскрыть защищаемую информацию
Уязвимость пакетов программ Microsoft Office, Excel и 365 Apps for Enterprise связана с чтением за пределами допустимого диапазона в памяти. Эксплуатация уязвимости может позволить нарушителю раскрыть защищаемую информацию...
Уязвимость пакетов программ Microsoft Office, Excel и 365 Apps for Enterprise, позволяющая нарушителю выполнить произвольный код
Уязвимость пакетов программ Microsoft Office, Excel и 365 Apps for Enterprise связана с чтением за пределами допустимого диапазона в памяти. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код...
GHSA-XH5M-36R6-47M3 PHPSpreadsheet: XLS/OLE sector-chain self-loop causes memory exhaustion
Summary PhpSpreadsheet's OLE reader follows sector chains from attacker-controlled XLS/OLE metadata without detecting cycles or enforcing a maximum chain length. A tiny malformed .xls/OLE file can set the small-block depot sector chain to point back to itself. During normal XLS detection,...
PT-2026-64048
Summary PhpSpreadsheet's OLE reader follows sector chains from attacker-controlled XLS/OLE metadata without detecting cycles or enforcing a maximum chain length. A tiny malformed .xls/OLE file can set the small-block depot sector chain to point back to itself. During normal XLS detection,...
The vulnerabilities of Microsoft Office, Excel, and 365 Apps for Enterprise packages allow a perpetrator to execute arbitrary code.
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to buffer overflow in the heap. Exploiting this vulnerability can allow an attacker to execute arbitrary code...