CVE-2026-18294

HighCVSS 7.8

Published: 20/08/2026(UTC)Updated: 31/08/2026(UTC)Translated: 20/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.23%

14th percentile - higher than 14% of all known CVEs

Summary

Memory corruption vulnerability in OriginLab Origin Viewer OGW file parsing allows remote code execution. Lack of proper validation of user-supplied data leads to memory corruption. User interaction is required, such as visiting a malicious page or opening a malicious file.

Risk Assessment

Users can be attacked via malicious OGW files, potentially leading to code execution in the application context. This could result in system compromise or data theft.

Recommendation

Update Origin Viewer to a patched version. Also educate users about the risks of opening untrusted OGW files.

Other vulnerabilities in OriginLab Origin Viewer

CVE-2026-18293High
Out-of-bounds write in OriginLab Origin Viewer OPJ file parsing allows remote code execution. Lack of proper validation of user-supplied data leads to write past the end of an allocated data structure. User interaction is required, such as visiting a malicious page or opening a malicious file.

Original NVD description (English source)

OriginLab Origin Viewer OGW File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of OGW files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-29338.