Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Vendors
@file-viewer
@file-viewer vulnerabilities
Newest
@file-viewer
doc
,
flyfish-dev
file-viewer
,
msdoc-viewer
+2 more
File Viewer: DOM XSS via unsafe hyperlink schemes in the legacy DOC renderer
CVE-2026-91127
Fix available
8.2
High
September 18, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open