libreoffice vulnerabilities (Alpine)

21 vulnerabilities.

• libreoffice Alpine Graphic on-click binding allows unchecked script execution CVE-2024-3044 Fix available 6.5 MediumMay 14, 2024
• libreoffice Alpine Macro URL arbitrary script execution CVE-2022-3140 Fix available 6.3 MediumOctober 11, 2022
• libreoffice Alpine Weak Master Keys CVE-2022-26307 Fix available 8.8 HighJuly 25, 2022
• libreoffice Alpine Execution of Untrusted Macros Due to Improper Certificate Validation CVE-2022-26306 Fix available 7.5 HighJuly 25, 2022
• libreoffice Alpine Execution of Untrusted Macros Due to Improper Certificate Validation CVE-2022-26305 Fix available 7.5 HighJuly 25, 2022
• libreoffice Alpine Incorrect trust validation of signature with ambiguous KeyInfo children CVE-2021-25636 Fix available 7.5 HighFebruary 22, 2022
• libreoffice Alpine Content Manipulation with Certificate Validation Attack CVE-2021-25635 Fix available 5.2 MediumOctober 12, 2021
• libreoffice Alpine Timestamp Manipulation with Signature Wrapping CVE-2021-25634 Fix available 7.5 HighOctober 12, 2021
• libreoffice Alpine Content Manipulation with Double Certificate Attack CVE-2021-25633 Fix available 7.5 HighOctober 11, 2021
• libreoffice Alpine denylist of executable filename extensions possible to bypass under windows CVE-2021-25631 Fix available 8.8 HighMay 3, 2021
• libreoffice Alpine XForms submissions could overwrite local files CVE-2020-12803 Fix available 6.5 MediumJune 8, 2020
• libreoffice Alpine remote graphics contained in docx format retrieved in 'stealth mode' CVE-2020-12802 Fix available 5.3 MediumJune 8, 2020
• libreoffice Alpine Crash-recovered MSOffice encrypted documents defaulted to not to using encryption on next save CVE-2020-12801 Fix available 5.3 MediumMay 18, 2020
• libreoffice Alpine Windows 8.3 path equivalence handling flaw allows LibreLogo script execution CVE-2019-9855 Fix available 9.8 CriticalSeptember 6, 2019
• libreoffice Alpine Unsafe URL assembly flaw in allowed script location check CVE-2019-9854 Fix available 7.8 HighSeptember 6, 2019
• libreoffice Alpine Insufficient URL encoding flaw in allowed script location check CVE-2019-9852 Fix available 7.8 HighAugust 15, 2019
• libreoffice Alpine LibreLogo global-event script execution CVE-2019-9851 Public exploitFix available EPSS 77.8% 9.8 CriticalAugust 15, 2019
• libreoffice Alpine Insufficient url validation allowing LibreLogo script execution CVE-2019-9850 Fix available 9.8 CriticalAugust 15, 2019
• libreoffice Alpine LibreOffice has a 'stealth mode' in which only documents from locations deemed 'trusted' are... CVE-2019-9849 Public exploitFix available 4.3 MediumJuly 16, 2019
• libreoffice Alpine LibreOffice has a feature where documents can specify that pre-installed scripts can be executed... CVE-2019-9848 Public exploitFix available EPSS 28.9% 9.8 CriticalJuly 16, 2019
• libreoffice Alpine LibreOffice before 2016-12-22 has an out-of-bounds write caused by a heap-based buffer overflow... CVE-2016-10327 Fix available 9.8 CriticalApril 14, 2017