Beveiligingsadvies

CVE-2026-3663

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-03-07 14:32:09

Laatst bijgewerkt 2026-03-11 16:29:23

Toegewezen door VulDB

CVSS-score 4.8

Status PUBLISHED

Beschrijving

A vulnerability was found in xlnt-community xlnt up to 1.6.1. This issue affects the function xlnt::detail::compound_document_istreambuf::xsgetn of the file source/detail/cryptography/compound_document.cpp of the component XLSX File Parser. Performing a manipulation results in out-of-bounds read. The attack is only possible with local access. The exploit has been made public and could be used. The patch is named 147. It is recommended to apply a patch to fix this issue.

← Alle CVE's bekijken Bekijk op cve.org ↗