Update CVE Harian: CVE-2026-3463
03 March 2026
4 views
1 likes
CVE NVD
CVE ID: CVE-2026-3463
Tingkat Risiko: LOW
Skor CVSS: 3.3
Tanggal Publikasi: 2026-03-03T12:16:06.880
Ringkasan Mudah Dipahami:
A weakness has been identified in xlnt-community xlnt up to 1.6.1. Impacted is the function xlnt::detail::binary_writer::append of the file source/detail/binary.hpp of the component Compound Document Parser. This manipulation causes heap-based buffer overflow. The attack can only be executed locally. The exploit has been made available to the public and could be used for attacks. Patch name: 147. It is suggested to install a patch to address t...
Dampak yang Mungkin Terjadi:
- Sistem bisa dieksploitasi jika belum dipatch.
- Potensi gangguan layanan, kebocoran data, atau akses tidak sah.
Langkah Cepat yang Disarankan:
1. Cek apakah aset Anda memakai produk/versi yang terdampak.
2. Terapkan patch/update resmi dari vendor secepatnya.
3. Pantau log dan indikator anomali setelah patch.
4. Batasi akses layanan dari internet jika belum sempat patch.
Referensi Utama NVD:
- https://github.com/oneafter/0128/blob/main/xl2/repro
- https://github.com/xlnt-community/xlnt/
- https://github.com/xlnt-community/xlnt/issues/138
- https://github.com/xlnt-community/xlnt/issues/138#issuecomment-3868381672
- https://github.com/xlnt-community/xlnt/pull/147
Tingkat Risiko: LOW
Skor CVSS: 3.3
Tanggal Publikasi: 2026-03-03T12:16:06.880
Ringkasan Mudah Dipahami:
A weakness has been identified in xlnt-community xlnt up to 1.6.1. Impacted is the function xlnt::detail::binary_writer::append of the file source/detail/binary.hpp of the component Compound Document Parser. This manipulation causes heap-based buffer overflow. The attack can only be executed locally. The exploit has been made available to the public and could be used for attacks. Patch name: 147. It is suggested to install a patch to address t...
Dampak yang Mungkin Terjadi:
- Sistem bisa dieksploitasi jika belum dipatch.
- Potensi gangguan layanan, kebocoran data, atau akses tidak sah.
Langkah Cepat yang Disarankan:
1. Cek apakah aset Anda memakai produk/versi yang terdampak.
2. Terapkan patch/update resmi dari vendor secepatnya.
3. Pantau log dan indikator anomali setelah patch.
4. Batasi akses layanan dari internet jika belum sempat patch.
Referensi Utama NVD:
- https://github.com/oneafter/0128/blob/main/xl2/repro
- https://github.com/xlnt-community/xlnt/
- https://github.com/xlnt-community/xlnt/issues/138
- https://github.com/xlnt-community/xlnt/issues/138#issuecomment-3868381672
- https://github.com/xlnt-community/xlnt/pull/147
Link Referensi
NVD NIST Auto DailyTags
cve
nvd
auto-daily
cve-2026-3463
low
Komentar
Tester Auto
2026-03-03 21:23:05
Komentar uji dari API