Gnumeric

This hub aggregates every CVE we track for Gnumeric, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 5 most recently published vulnerabilities affecting Gnumeric.

• CVE-2026-97222Gnumeric: gnumeric: heap use-after-free when opening a malformed workbook5.5Sep 25, 2026
• CVE-2013-6836Heap-based buffer overflow in the ms_escher_get_data function in plugins/excel/ms-escher.c in GNOME Office Gnumeric before 1.12.9 allows remote attackers to cause a denial of service (crash) via a ...4.3Dec 19, 2013
• CVE-2009-0318Untrusted search path vulnerability in the GObject Python interpreter wrapper in Gnumeric allows local users to execute arbitrary code via a Trojan horse Python file in the current working director...6.9Jan 28, 2009
• CVE-2008-0668The excel_read_HLINK function in plugins/excel/ms-excel-read.c in Gnome Office Gnumeric before 1.8.1 allows user-assisted remote attackers to execute arbitrary code via a crafted XLS file containin...9.3Feb 11, 2008
• CVE-1999-0719The Guile plugin for the Gnumeric spreadsheet package allows attackers to execute arbitrary code.4.6Jun 2, 2000