https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-3665.htmlhttps://patchthecve.com/cve/CVE-2026-3665.htmlWed, 17 Jun 2026 10:43:56 +0000LOW 3.3: A vulnerability was identified in xlnt-community xlnt up to 1.6.1. The affected element is the function xlnt::detail::xlsx_consumer::read_office_document of the file source/detail/serialization/xlsx_consumer.cpp of the component XLSX File Parser. The manipulation leads to null pointer dereference. Thttps://patchthecve.com/cve/CVE-2026-3664.htmlhttps://patchthecve.com/cve/CVE-2026-3664.htmlWed, 17 Jun 2026 10:43:56 +0000LOW 3.3: A vulnerability was determined in xlnt-community xlnt up to 1.6.1. Impacted is the function xlnt::detail::compound_document::read_directory of the file source/detail/cryptography/compound_document.cpp of the component Encrypted XLSX File Parser. Executing a manipulation can lead to out-of-bounds reahttps://patchthecve.com/cve/CVE-2026-3663.htmlhttps://patchthecve.com/cve/CVE-2026-3663.htmlWed, 17 Jun 2026 10:43:56 +0000LOW 3.3: A vulnerability was found in xlnt-community xlnt up to 1.6.1. This issue affects the function xlnt::detail::compound_document_istreambuf::xsgetn of the file source/detail/cryptography/compound_document.cpp of the component XLSX File Parser. Performing a manipulation results in out-of-bounds read. Thhttps://patchthecve.com/cve/CVE-2026-3463.htmlhttps://patchthecve.com/cve/CVE-2026-3463.htmlWed, 17 Jun 2026 10:43:37 +0000LOW 3.3: A weakness has been identified in xlnt-community xlnt up to 1.6.1. Impacted is the function xlnt::detail::binary_writer::append of the file source/detail/binary.hpp of the component Compound Document Parser. This manipulation causes heap-based buffer overflow. The attack can only be executed locally