gnumeric vulnerabilities

CVEs whose affected-version data names the gnumeric package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-97222Medium· 5.5

1mo ago

A heap use-after-free flaw was found in Gnumeric

A heap use-after-free flaw was found in Gnumeric. When a user opens a crafted Gnumeric workbook containing a malformed SheetObjectComponent element, the XML parser can dereference a freed sheet-object component, causing Gnumeric to crash.

▾ SunlitGNOME · gnumericEPSS 0.12%via NVD