PatchTheCVE: gaia-gishttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2015-2776: The parse_SST function in FreeXL before 1.0.0i allows remote attackers to cause a denial of service (memory cohttps://patchthecve.com/cve/CVE-2015-2776.htmlhttps://patchthecve.com/cve/CVE-2015-2776.htmlWed, 17 Jun 2026 00:24:44 +0000MEDIUM 4.3: The parse_SST function in FreeXL before 1.0.0i allows remote attackers to cause a denial of service (memory consumption) via a crafted shared strings table in a workbook.CVE-2015-2754: FreeXL before 1.0.0i allows remote attackers to cause a denial of service (stack corruption) and possibly exechttps://patchthecve.com/cve/CVE-2015-2754.htmlhttps://patchthecve.com/cve/CVE-2015-2754.htmlWed, 17 Jun 2026 00:24:41 +0000MEDIUM 6.8: FreeXL before 1.0.0i allows remote attackers to cause a denial of service (stack corruption) and possibly execute arbitrary code via a crafted workbook, related to a "premature EOF."CVE-2015-2753: FreeXL before 1.0.0i allows remote attackers to cause a denial of service (stack corruption) or possibly execuhttps://patchthecve.com/cve/CVE-2015-2753.htmlhttps://patchthecve.com/cve/CVE-2015-2753.htmlWed, 17 Jun 2026 00:24:41 +0000MEDIUM 6.8: FreeXL before 1.0.0i allows remote attackers to cause a denial of service (stack corruption) or possibly execute arbitrary code via a crafted sector in a workbook.