[ Vendor · 6 CVEs ]
PHPOffice
CVEs affecting PHPOffice published in the last 30 days, plus any PHPOffice CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-108357 | 22 Oct 2026 | CVSS 8.8 | PHPOffice PhpSpreadsheetPhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. From 3.3.0 until 3.10.8 and 5.10.0, Reader\Xml passes stored… | |
| CVE-2026-108358 | 22 Oct 2026 | CVSS 8.8 | PHPOffice PhpSpreadsheetPhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Prior to 1.30.7, 2.1.19, 2.4.8, 3.10.8, and 5.10.0, XmlScanner::scan… | |
| CVE-2026-108359 | 22 Oct 2026 | CVSS 8.7 | PHPOffice PhpSpreadsheetPhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Prior to 1.30.7, 2.1.19, 2.4.8, 3.10.8, and 5.10.0… | |
| CVE-2026-108360 | 22 Oct 2026 | CVSS 6.4 | PHPOffice PhpSpreadsheetPhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Prior to 1.30.7, 2.1.19, 2.4.8, 3.10.8, and 5.10.0… | |
| CVE-2026-114403 | 21 Oct 2026 | CVSS 8.1 | PHPOffice PHPPresentationPHPOffice PHPPresentation through 1.2.0 contains an insecure deserialization vulnerability that allows attackers to instantiate arbitrary PHP objects… | |
| CVE-2026-114404 | 21 Oct 2026 | CVSS 6.1 | PHPOffice PHPPresentationPHPOffice PHPPresentation 1.2.0 contains a cross-site scripting vulnerability in the HTML writer that allows attackers who supply presentation… |