CVE-2026-107211

Published 7 October 2026 · tracked since 8 October 2026

Description

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.8.1 to 2.11.0, separately parsed pivot-table field indices are used to index the pivot-cache field-name slice without bounds checks. extractPivotTableFields uses getPivotCacheFieldsName output while proces

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-76266 HIGH 7.7
• CVE-2026-1403 MEDIUM 6.5
• CVE-2026-107229 MEDIUM 4
• CVE-2026-107353 MEDIUM 6.5
• CVE-2026-107161 HIGH 7.5
• CVE-2026-107313 MEDIUM 4.2
• CVE-2026-103371
• CVE-2026-107215 HIGH 7.5
• CVE-2026-95606 CRITICAL 9.8
• CVE-2026-95534 HIGH 8.8

→ Open the live CVE board · all tools