Threats affecting pkg:deb/gnome/gnumeric

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.5	EPSS 0.1%	CVE-2026-97222GNOME Gnumeric · Use After Free Medium5.5EPSS 0.1%2026-09-25CVE Database V5CVE-2026-97222 CVE-2026-97222 is a medium severity heap use-after-free vulnerability in GNOME Gnumeric. It is triggered when a user opens a specially crafted workbook containing a malformed SheetObjectComponent element, causing the XML parser to dereference a freed sheet-object component and crash the application. This affects Gnumeric versions 1.11.0 and later. The vulnerability has a CVSS score of 5.5 and does not impact confidentiality or integrity but causes availability disruption due to application crashes. EPSS 0.1%Vulnerability	CVE Database V5	2026-09-25

Page 1 of 1