ZDI-26-553: OriginLab Origin Viewer OGW File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI discloses OriginLab Origin Viewer OGW file parsing memory corruption RCE (CVE-2026-18294, CVSS 7.8) exploitable via malicious file or page.
ZDI advisory ZDI-26-553 describes a memory corruption vulnerability in OriginLab Origin Viewer's parsing of OGW files, tracked as CVE-2026-18294 with a CVSS score of 7.8. Remote code execution is possible but requires user interaction, meaning the target must open a malicious file or visit a malicious page.
- OriginLab Origin Viewer OGW file parsing memory corruption
- CVE-2026-18294 rated CVSS 7.8
- RCE requires target to open malicious file or visit malicious page
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-18294 | Memory Corruption RCE in OriginLab Origin Viewer OGW Parsing | 7.8 | <1% |
From the original article
This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.
zerodayinitiative.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.