Denial of Service

Every one of the 5 is a mark on the map. Named now: 1 to 5, most at risk first.

1. PhpSpreadsheet ODS Reader: Unbounded number-rows-repeated → CPU & Memory Exhaustion (DoS)CVE-2026-108359PHPOffice · CVSS 8.7 · 0.7% likely

   CWE-789

2. PhpSpreadsheet: XLS/OLE sector-chain self-loop causes memory exhaustionCVE-2026-59933PHPOffice · CVSS 7.5 · 0.5% likely

   CWE-400

3. PhpSpreadsheet: Gnumeric reader unbounded gzip expansion causes memory exhaustionCVE-2026-59932PHPOffice · CVSS 7.5 · 0.5% likely

   CWE-409

4. PhpSpreadsheet: CPU Denial of Service via Unbounded Row Number in XLSX Row DimensionsCVE-2026-40902PHPOffice · CVSS 7.5 · 0.4% likely

   CWE-770

5. PhpSpreadsheet: CPU Denial of Service via Unbounded Row Index in SpreadsheetML XML ReaderCVE-2026-40863PHPOffice · CVSS 7.5 · 0.4% likely

   CWE-770

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.