Skip to content
OpenAdvisories
High · 7.8 CVE-2026-86926 EUVD-2026-85429GHSA-9vrp-wjh8-mfg5

A heap buffer overflow vulnerability in the FileMaker Server database engine block parsing routine allowed a maliciously crafted .fmp12 dat…

Published Sep 23, 2026 · Updated Sep 24, 2026 · Assigned by apple

Description

A heap buffer overflow vulnerability in the FileMaker Server database engine block parsing routine allowed a maliciously crafted .fmp12 database file to cause memory corruption, potentially leading to arbitrary code execution. This vulnerability is addressed in FileMaker Server version 26.0.3.

Affected products

VendorProductAffectedFixed
Claris FileMaker Server < 26.0.3 26.0.3

References