Read the docs

Yeraze

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Yeraze records in CISA KEV

No Yeraze vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-74930 CVE-2026-111146

Heap out-of-bounds read in ytnef MAPIPrint leaks memory

Priority MEDIUM 64

ytnef through 2.1.2 contains a heap out-of-bounds read vulnerability in MAPIPrint() that allows attackers to read past heap allocations by supplying compressed RTF properties.

CVSS 4.0MEDIUM 6.9 Local No auth User interaction EPSS 0.00127 Published 2026-10-15 No fix listed CWE-125
TI-2026-74929 CVE-2026-111145

Heap out-of-bounds read in ytnef RTF decompression

Priority MEDIUM 64

ytnef through 2.1.2 contains a heap out-of-bounds read vulnerability in DecompressRTF() in lib/ytnef.c that never validates uncompressedSize for uncompressed RTF streams.

CVSS 4.0MEDIUM 6.9 Local No auth User interaction EPSS 0.00127 Published 2026-10-15 No fix listed CWE-125
Open these records in search →