Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was determined in xlnt-community xlnt up to 1.6.1. Impacted is the function xlnt::detail::compound_document::read_directory of the file source/detail/cryptography/compound_document.cpp of the component Encrypted XLSX File Parser. Executing a manipulation can lead to out-of-bounds read. The attack is restricted to local execution. The exploit has been publicly disclosed and may be utilized. This patch is called 147. Applying a patch is advised to resolve this issue.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-3664 Out-of-Bounds Read Vulnerability in xlnt-community xlnt Encrypted XLSX Parser https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-3664
Post summary
The text announces a new out-of-bounds read vulnerability (CVE‑2026‑3664) affecting the xlnt library’s encrypted XLSX parser.
CVE-2026-3664 A vulnerability was determined in xlnt-community xlnt up to 1.6.1. Impacted is the function xlnt::detail::compound_document::read_directory of the file source/detail/cr… https://www.cve.org/CVERecord?id=CVE-2026-3664
Post summary
CVE-2026-3664 is a vulnerability discovered in xlnt‑community xlnt affecting the compound_document::read_directory function up to version 1.6.1.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-3664 - xlnt-community xlnt Encrypted XLSX File compound_document.cpp read_directory out-of-bounds Intel Report: https://ift.tt/EVi0dMN
Post summary
The tweet issues a threat alert for CVE‑2026‑3664, highlighting an out‑of‑bounds read flaw in xlnt-community’s encrypted XLSX handling, with no PoC or exploit details provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | xlnt-community | xlnt | - | - | - |