p PatchFirst

PatchFirst · Latest vulnerabilities

libmsiecf vulnerabilities

Vulnerability published for libmsiecf in the last 30 days: 1. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerability: 1

  1. CVE-2026-116743

    Medium · CVSS 6.8EPSS 0.13%No fix published

    libyal libmsiecf through 20260525 Double Free via libmsiecf_url_values_read_data

    libyal libmsiecf through 20260525 contains a double free vulnerability in libmsiecf_url_values_read_data() that allows attackers to corrupt heap memory via crafted partial URL records. Attackers can supply a crafted MSIE cache index.dat file whose recovered partial record has an oversized unknown_offset, crashing forensic tools processing it.

    libmsiecfOperating systems
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →