CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 3,093 CVEs published, 233 critical, and 3 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
3,093
Show in the list
Critical, last 7 days
233
Show in the list
Healthcare-tagged, last 7 days
10
Show in the list
Known exploited (CISA KEV)
1,762
Show in the list

Showing CVEs that name the product qax_os:excelize. Show all products

18 CVEs
Showing 1 to 10.
CVESeverityTitlePublished
CVE-2026-107225Medium 6.5Excelize: GetStyle panics on a negative fillId, borderId or fontId in styles.xml
Assigned by GitHub_M
Oct 7, 2026
CVE-2026-107224Medium 6.5Excelize: A Zip64 uncompressed-size of 2^63 panics OpenFile/OpenReader
Assigned by GitHub_M
Oct 7, 2026
CVE-2026-107223High 7.1Excelize: Unbounded <col max> attribute is loaded with no MaxColumns check and expanded per-column by flatCols(), so any column mutator hangs or OOMs the process
Assigned by GitHub_M
Oct 7, 2026
CVE-2026-107222Medium 6.5Excelize: GetConditionalFormats indexes conditional-formatting rule sub-elements with no length or nil check
Assigned by GitHub_M
Oct 7, 2026
CVE-2026-107221Medium 6.5Excelize: a row whose earlier cell has a higher column reference than its last cell panics index out of range on almost every worksheet read API
Assigned by GitHub_M
Oct 7, 2026
CVE-2026-107220Medium 6.5Excelize: Panic in cellInRange on a worksheet with an empty mergeCell ref
Assigned by GitHub_M
Oct 7, 2026
CVE-2026-107219High 7.5Excelize: Unbounded spinCount in agile decryption burns CPU during OpenFile
Assigned by GitHub_M
Oct 7, 2026
CVE-2026-107218Medium 5.3Excelize: RIGHT() on supplementary-plane text slices with a negative index and panics
Assigned by GitHub_M
Oct 7, 2026
CVE-2026-107217High 7.5Excelize ColumnNameToNumber: int64 overflow yields an out-of-domain coordinate with nil error, causing negative slice index panic on r="0" rows
Assigned by GitHub_M
Oct 7, 2026
CVE-2026-107216High 7.5Excelize ANCHORARRAY: mutually-referencing array formulas recurse unboundedly via re-entrant CalcCellValue, causing a fatal stack overflow
Assigned by GitHub_M
Oct 7, 2026

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.