Vulnerabilidades em qax-os
18 resultadosAnálise Vexday
QAX-OS apresenta um perfil de risco moderado com 3 vulnerabilidades catalogadas, todas publicadas nos últimos 90 dias, indicando exposição recente. Nenhuma vulnerabilidade crítica ou em exploração ativa foi registrada até o momento. A fraqueza dominante (CWE-770) aponta para problemas de alocação de recursos, recomendando monitoramento continuado dado o padrão de divulgações recentes.
CVE-2026-59161HIGHExcelize: Streaming GetRows row-bound bypass causes attacker-controlled allocationEPSS 0.7%CVE-2026-59162MEDIUMExcelize: Negative shared-string index causes panic in GetCellValue and GetRowsEPSS 0.7%CVE-2026-54063HIGHExcelize: Unbounded Row Index Allocation in Worksheet Parser (checkSheet OOM/Panic DoS)EPSS 0.6%CVE-2026-107216HIGHExcelize ANCHORARRAY: mutually-referencing array formulas recurse unboundedly via re-entrant CalcCellValue, causing a fatal stack overflowEPSS 0.4%CVE-2026-107223HIGHExcelize: Unbounded <col max> attribute is loaded with no MaxColumns check and expanded per-column by flatCols(), so any column mutator hangs or OOMs the processEPSS 0.4%CVE-2026-107217HIGHExcelize ColumnNameToNumber: int64 overflow yields an out-of-domain coordinate with nil error, causing negative slice index panic on r="0" rowsEPSS 0.4%CVE-2026-107219HIGHExcelize: Unbounded spinCount in agile decryption burns CPU during OpenFileEPSS 0.4%CVE-2026-107212HIGHExcelize: Unbounded row number in Rows.Columns makes GetRows and the Rows iterator loop for daysEPSS 0.4%CVE-2026-107218MEDIUMExcelize: RIGHT() on supplementary-plane text slices with a negative index and panicsEPSS 0.3%CVE-2026-107224MEDIUMExcelize: A Zip64 uncompressed-size of 2^63 panics OpenFile/OpenReaderEPSS 0.3%CVE-2026-107225MEDIUMExcelize: GetStyle panics on a negative fillId, borderId or fontId in styles.xmlEPSS 0.3%CVE-2026-107222MEDIUMExcelize: GetConditionalFormats indexes conditional-formatting rule sub-elements with no length or nil checkEPSS 0.3%CVE-2026-107221MEDIUMExcelize: a row whose earlier cell has a higher column reference than its last cell panics index out of range on almost every worksheet read APIEPSS 0.3%CVE-2026-107220MEDIUMExcelize: Panic in cellInRange on a worksheet with an empty mergeCell refEPSS 0.3%CVE-2026-107215HIGHExcelize: extractPart allocates attacker-controlled, unbounded and negative-sized buffers from CFB directory entries: remote panic / OOM DoSEPSS 0.2%CVE-2026-107214HIGHExcelize Decrypt: unrecoverable panics on malformed OLE/CFB encrypted workbooksEPSS 0.2%CVE-2026-107211HIGHExcelize: Unchecked pivot-cache field index in extractPivotTableFields causes unrecoverable panicEPSS 0.2%CVE-2026-107213HIGHExcelize: Nil-pointer dereference in GetSlicers when a worksheet has extLst present but no drawing elementEPSS 0.2%