libxls project records

20 published records for vendor libxls project.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 9
With a fix record: 65%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

20 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
36Monitor	CVE-2017-12109No exploit	An exploitable integer overflow vulnerability exists in the xls_preparseWorkSheet function of libxls 1.4 when handling a MULRK record.libxls project · libxls · CWE-190 pre-auth RCE Memory safety	High8.8	—	2.6%	Apr 24, 2018
36Monitor	CVE-2017-12108No exploit	An exploitable integer overflow vulnerability exists in the xls_preparseWorkSheet function of libxls 1.4 when handling a MULBLANK record.libxls project · libxls · CWE-190 pre-auth RCE Memory safety	High8.8	—	2.6%	Apr 24, 2018
36Monitor	CVE-2017-2910No exploit	An exploitable Out-of-bounds Write vulnerability exists in the xls_addCell function of libxls 2.0.libxls project · libxls · CWE-787 pre-auth RCE Memory safety	High8.8	—	2.1%	Dec 2, 2020
35Monitor	CVE-2018-20452No exploit	The read_MSAT_body function in ole.c in libxls 1.4.0 has an invalid free that allows attackers to cause a denial of service (application cralibxls project · libxls · CWE-119 Pre-auth Memory safety	High8.8	—	1.5%	Dec 25, 2018
32Monitor	CVE-2017-12110No exploit	An exploitable integer overflow vulnerability exists in the xls_appendSST function of libxls 1.4.A specially crafted XLS file can cause memolibxls project · libxls · CWE-190 RCE Memory safety	High7.8	—	2.1%	Nov 20, 2017
32Monitor	CVE-2017-12111No exploit	An exploitable out-of-bounds vulnerability exists in the xls_addCell function of libxls 1.4.libxls project · libxls · CWE-787 RCE Memory safety	High7.8	—	2.1%	Nov 20, 2017
32Monitor	CVE-2017-2897No exploit	An exploitable out-of-bounds write vulnerability exists in the read_MSAT function of libxls 1.4.libxls project · libxls · CWE-787 RCE Memory safety	High7.8	—	2.1%	Nov 20, 2017
32Monitor	CVE-2017-2919No exploit	An exploitable stack based buffer overflow vulnerability exists in the xls_getfcell function of libxls 1.3.4.libxls project · libxls · CWE-787 RCE Memory safety	High7.8	—	2.1%	Nov 20, 2017
32Monitor	CVE-2017-2896No exploit	An exploitable out-of-bounds write vulnerability exists in the xls_mergedCells function of libxls 1.4.libxls project · libxls · CWE-787 RCE Memory safety	High7.8	—	2.1%	Nov 20, 2017
26Monitor	CVE-2023-38852No exploit	Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a craftelibxls project · libxls · CWE-787 pre-auth RCE Memory safety Denial of service	Medium6.5	—	1.3%	Aug 15, 2023
26Monitor	CVE-2021-27836No exploit	An issue was discoverered in in function xls_getWorkSheet in xls.c in libxls 1.6.2, allows attackers to cause a denial of service, via a cralibxls project · libxls · CWE-476 Pre-auth Memory safety Denial of service	Medium6.5	—	1.1%	Nov 3, 2021
26Monitor	CVE-2018-20450No exploit	The read_MSAT function in ole.c in libxls 1.4.0 has a double free that allows attackers to cause a denial of service (application crash) vialibxls project · libxls · CWE-415 Pre-auth Memory safety Denial of service	Medium6.5	—	1.0%	Dec 25, 2018
26Monitor	CVE-2023-38856No exploit	Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a craftelibxls project · libxls · CWE-787 pre-auth RCE Memory safety Denial of service	Medium6.5	—	0.8%	Aug 15, 2023
26Monitor	CVE-2023-38851No exploit	Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a craftelibxls project · libxls · CWE-787 pre-auth RCE Memory safety Denial of service	Medium6.5	—	0.8%	Aug 15, 2023
26Monitor	CVE-2023-38853No exploit	Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a craftelibxls project · libxls · CWE-787 pre-auth RCE Memory safety Denial of service	Medium6.5	—	0.8%	Aug 15, 2023
26Monitor	CVE-2023-38854No exploit	Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a craftelibxls project · libxls · CWE-787 pre-auth RCE Memory safety Denial of service	Medium6.5	—	0.8%	Aug 15, 2023
26Monitor	CVE-2023-38855No exploit	Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a craftelibxls project · libxls · CWE-787 pre-auth RCE Memory safety Denial of service	Medium6.5	—	0.8%	Aug 15, 2023
26Monitor	CVE-2026-26824No exploit	libxls through version 1.6.3 contains a use of uninitialized memory vulnerability in the OLE container parser.libxls project · libxls · CWE-457 Pre-auth	Medium6.5	—	0.2%	Jun 3, 2026
22Monitor	CVE-2020-27819No exploit	An issue was discovered in libxls before and including 1.6.1 when reading Microsoft Excel files.libxls project · libxls · CWE-476 Memory safety Denial of service	Medium5.5	—	0.8%	Feb 23, 2021
21Monitor	CVE-2026-26825No exploit	A use-of-uninitialized memory vulnerability exists in libxls 1.6.3 when parsing malformed XLS files.libxls project · libxls · CWE-908 Pre-auth Memory safety	Medium5.3	—	0.2%	Jun 3, 2026

CVE-2017-12109
36Monitor
An exploitable integer overflow vulnerability exists in the xls_preparseWorkSheet function of libxls 1.4 when handling a MULRK record.
HighCVSS 8.8No exploitEPSS 2%
- pre-auth RCE
- Memory safety
libxls project · libxlsApr 24, 2018
CVE-2017-12108
36Monitor
An exploitable integer overflow vulnerability exists in the xls_preparseWorkSheet function of libxls 1.4 when handling a MULBLANK record.
HighCVSS 8.8No exploitEPSS 2%
- pre-auth RCE
- Memory safety
libxls project · libxlsApr 24, 2018
CVE-2017-2910
36Monitor
An exploitable Out-of-bounds Write vulnerability exists in the xls_addCell function of libxls 2.0.
HighCVSS 8.8No exploitEPSS 2%
- pre-auth RCE
- Memory safety
libxls project · libxlsDec 2, 2020
CVE-2018-20452
35Monitor
The read_MSAT_body function in ole.c in libxls 1.4.0 has an invalid free that allows attackers to cause a denial of service (application cra
HighCVSS 8.8No exploitEPSS 1%
- Pre-auth
- Memory safety
libxls project · libxlsDec 25, 2018
CVE-2017-12110
32Monitor
An exploitable integer overflow vulnerability exists in the xls_appendSST function of libxls 1.4.A specially crafted XLS file can cause memo
HighCVSS 7.8No exploitEPSS 2%
- RCE
- Memory safety
libxls project · libxlsNov 20, 2017
CVE-2017-12111
32Monitor
An exploitable out-of-bounds vulnerability exists in the xls_addCell function of libxls 1.4.
HighCVSS 7.8No exploitEPSS 2%
- RCE
- Memory safety
libxls project · libxlsNov 20, 2017
CVE-2017-2897
32Monitor
An exploitable out-of-bounds write vulnerability exists in the read_MSAT function of libxls 1.4.
HighCVSS 7.8No exploitEPSS 2%
- RCE
- Memory safety
libxls project · libxlsNov 20, 2017
CVE-2017-2919
32Monitor
An exploitable stack based buffer overflow vulnerability exists in the xls_getfcell function of libxls 1.3.4.
HighCVSS 7.8No exploitEPSS 2%
- RCE
- Memory safety
libxls project · libxlsNov 20, 2017
CVE-2017-2896
32Monitor
An exploitable out-of-bounds write vulnerability exists in the xls_mergedCells function of libxls 1.4.
HighCVSS 7.8No exploitEPSS 2%
- RCE
- Memory safety
libxls project · libxlsNov 20, 2017
CVE-2023-38852
26Monitor
Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafte
MediumCVSS 6.5No exploitEPSS 1%
- pre-auth RCE
- Memory safety
- Denial of service
libxls project · libxlsAug 15, 2023
CVE-2021-27836
26Monitor
An issue was discoverered in in function xls_getWorkSheet in xls.c in libxls 1.6.2, allows attackers to cause a denial of service, via a cra
MediumCVSS 6.5No exploitEPSS 1%
- Pre-auth
- Memory safety
- Denial of service
libxls project · libxlsNov 3, 2021
CVE-2018-20450
26Monitor
The read_MSAT function in ole.c in libxls 1.4.0 has a double free that allows attackers to cause a denial of service (application crash) via
MediumCVSS 6.5No exploitEPSS 1%
- Pre-auth
- Memory safety
- Denial of service
libxls project · libxlsDec 25, 2018
CVE-2023-38856
26Monitor
Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafte
MediumCVSS 6.5No exploitEPSS 0%
- pre-auth RCE
- Memory safety
- Denial of service
libxls project · libxlsAug 15, 2023
CVE-2023-38851
26Monitor
Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafte
MediumCVSS 6.5No exploitEPSS 0%
- pre-auth RCE
- Memory safety
- Denial of service
libxls project · libxlsAug 15, 2023
CVE-2023-38853
26Monitor
Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafte
MediumCVSS 6.5No exploitEPSS 0%
- pre-auth RCE
- Memory safety
- Denial of service
libxls project · libxlsAug 15, 2023
CVE-2023-38854
26Monitor
Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafte
MediumCVSS 6.5No exploitEPSS 0%
- pre-auth RCE
- Memory safety
- Denial of service
libxls project · libxlsAug 15, 2023
CVE-2023-38855
26Monitor
Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafte
MediumCVSS 6.5No exploitEPSS 0%
- pre-auth RCE
- Memory safety
- Denial of service
libxls project · libxlsAug 15, 2023
CVE-2026-26824
26Monitor
libxls through version 1.6.3 contains a use of uninitialized memory vulnerability in the OLE container parser.
MediumCVSS 6.5No exploitEPSS 0%
- Pre-auth
libxls project · libxlsJun 3, 2026
CVE-2020-27819
22Monitor
An issue was discovered in libxls before and including 1.6.1 when reading Microsoft Excel files.
MediumCVSS 5.5No exploitEPSS 0%
- Memory safety
- Denial of service
libxls project · libxlsFeb 23, 2021
CVE-2026-26825
21Monitor
A use-of-uninitialized memory vulnerability exists in libxls 1.6.3 when parsing malformed XLS files.
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
- Memory safety
libxls project · libxlsJun 3, 2026