EX
Vendor
Excelize
18
CVEs
0
On KEV
15
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-107225 | EX Excelize Excelize | 6.5 | Oct 7 | Excelize: GetStyle panics on a negative fillId, borderId or fontId in styles.xml |
| CVE-2026-107224 | EX Excelize Excelize | 6.5 | Oct 7 | Excelize: A Zip64 uncompressed-size of 2^63 panics OpenFile/OpenReader |
| CVE-2026-107223 | EX Excelize Excelize | 7.5 | Oct 7 | Excelize: Unbounded <col max> attribute is loaded with no MaxColumns check and expanded per-column by flatCols(), so any column mutator hangs or OOMs the process |
| CVE-2026-107222 | EX Excelize Excelize | 6.5 | Oct 7 | Excelize: GetConditionalFormats indexes conditional-formatting rule sub-elements with no length or nil check |
| CVE-2026-107221 | EX Excelize Excelize | 6.5 | Oct 7 | Excelize: a row whose earlier cell has a higher column reference than its last cell panics index out of range on almost every worksheet read API |
| CVE-2026-107220 | EX Excelize Excelize | 6.5 | Oct 7 | Excelize: Panic in cellInRange on a worksheet with an empty mergeCell ref |
| CVE-2026-107219 | EX Excelize Excelize | 7.5 | Oct 7 | Excelize: Unbounded spinCount in agile decryption burns CPU during OpenFile |
| CVE-2026-107218 | EX Excelize Excelize | 5.3 | Oct 7 | Excelize: RIGHT() on supplementary-plane text slices with a negative index and panics |
| CVE-2026-107217 | EX Excelize Excelize | 7.5 | Oct 7 | Excelize ColumnNameToNumber: int64 overflow yields an out-of-domain coordinate with nil error, causing negative slice index panic on r="0" rows |
| CVE-2026-107216 | EX Excelize Excelize | 7.5 | Oct 7 | Excelize ANCHORARRAY: mutually-referencing array formulas recurse unboundedly via re-entrant CalcCellValue, causing a fatal stack overflow |
| CVE-2026-107215 | EX Excelize Excelize | 7.5 | Oct 7 | Excelize: extractPart allocates attacker-controlled, unbounded and negative-sized buffers from CFB directory entries: remote panic / OOM DoS |
| CVE-2026-107214 | EX Excelize Excelize | 7.5 | Oct 7 | Excelize Decrypt: unrecoverable panics on malformed OLE/CFB encrypted workbooks |
| CVE-2026-107213 | EX Excelize Excelize | 5.5 | Oct 7 | Excelize: Nil-pointer dereference in GetSlicers when a worksheet has extLst present but no drawing element |
| CVE-2026-107212 | EX Excelize Excelize | 7.5 | Oct 7 | Excelize: Unbounded row number in Rows.Columns makes GetRows and the Rows iterator loop for days |
| CVE-2026-107211 | EX Excelize Excelize | 5.5 | Oct 7 | Excelize: Unchecked pivot-cache field index in extractPivotTableFields causes unrecoverable panic |
| CVE-2026-54063 | EX Excelize Excelize | 7.5 | Jul 10 | Excelize: Unbounded Row Index Allocation in Worksheet Parser (checkSheet OOM/Panic DoS) |
| CVE-2026-59162 | EX Excelize Excelize | 7.5 | Jul 10 | Excelize: Negative shared-string index causes panic in GetCellValue and GetRows |
| CVE-2026-59161 | EX Excelize Excelize | 7.5 | Jul 10 | Excelize: Streaming GetRows row-bound bypass causes attacker-controlled allocation |