Product by Qax-os
Excelize
18 known vulnerabilities in Excelize (Qax-os), 0 of them actively exploited (CISA KEV).
Key figures
18
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-59161 | Excelize: Streaming GetRows row-bound bypass causes attacker-controlled allocation | 7.5 | |
| High | CVE-2026-59162 | Excelize: Negative shared-string index causes panic in GetCellValue and GetRows | 7.5 | |
| High | CVE-2026-54063 | Excelize: Unbounded Row Index Allocation in Worksheet Parser (checkSheet OOM/Panic DoS) | 7.5 | |
| High | CVE-2026-107216 | Qax-os Excelize: Uncontrolled Recursion | 7.5 | |
| High | CVE-2026-107213 | Qax-os Excelize: NULL Pointer Dereference | 5.5 | |
| High | CVE-2026-107211 | Excelize: Unchecked pivot-cache field index in extractPivotTableFields causes unrecoverable panic | 5.5 | |
| High | CVE-2026-107223 | Qax-os Excelize: Memory Allocation with Excessive Size Value | 7.5 | |
| High | CVE-2026-107219 | Excelize: Unbounded spinCount in agile decryption burns CPU during OpenFile | 7.5 | |
| High | CVE-2026-107217 | Qax-os Excelize: Improper Validation of Array Index | 7.5 | |
| High | CVE-2026-107212 | Excelize: Unbounded row number in Rows.Columns makes GetRows and the Rows iterator loop for days | 7.5 | |
| High | CVE-2026-107215 | Qax-os Excelize: Memory Allocation with Excessive Size Value | 7.5 | |
| High | CVE-2026-107214 | Excelize Decrypt: unrecoverable panics on malformed OLE/CFB encrypted workbooks | 7.5 | |
| Medium | CVE-2026-107224 | Excelize: A Zip64 uncompressed-size of 2^63 panics OpenFile/OpenReader | 6.5 | |
| Medium | CVE-2026-107225 | Excelize: GetStyle panics on a negative fillId, borderId or fontId in styles.xml | 6.5 | |
| Medium | CVE-2026-107222 | Qax-os Excelize: Improper Validation of Array Index | 6.5 | |
| Medium | CVE-2026-107221 | Qax-os Excelize: Out-of-bounds Write | 6.5 | |
| Medium | CVE-2026-107220 | Excelize: Panic in cellInRange on a worksheet with an empty mergeCell ref | 6.5 | |
| Medium | CVE-2026-107218 | Excelize: RIGHT() on supplementary-plane text slices with a negative index and panics | 5.3 |