Memory Corruption Vulnerability in OriginLab Origin Viewer
CVE-2026-18294

7.8HIGH

Key Information:

Vendor

Originlab

Status
Origin Viewer
Vendor
CVE Published:
20 August 2026

What is CVE-2026-18294?

A memory corruption vulnerability exists in OriginLab's Origin Viewer due to improper validation of OGW file data, allowing remote attackers to execute arbitrary code. Successful exploitation requires user interaction, where the target must either access a malicious webpage or open a specially crafted OGW file. The flaw's exploitation can compromise the integrity of the application and may allow attackers to execute commands in the context of the affected application.

Affected Version(s)

Origin Viewer 9.9.5

References

https://www.zerodayinitiative.com/advisories/ZDI-26-553/
x_research-advisory
https://docs.originlab.com/cve/CVE-2026-18294
vendor-advisory

CVSS V3.0

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.