Libreoffice vulnerabilities

Products

• Libreoffice 71

Newest

• libreoffice Heap Buffer Overflow in AgileEngine CVE-2026-4430 Fix available 5.4 MediumMay 7, 2026
• libreoffice TCC Bypass via Inherited Permissions in Bundled Interpreter CVE-2025-14714 0.9 LowDecember 15, 2025
• libreoffice PDF signature forgery with adbe.pkcs7.sha1 SubFilter CVE-2025-2866 Fix available 2.4 LowApril 27, 2025
• libreoffice, debian linux +1 more Macro URL arbitrary script execution CVE-2025-1080 Fix available 7.2 HighMarch 4, 2025
• libreoffice Executable hyperlink Windows path targets executed unconditionally on activation CVE-2025-0514 7.2 HighFebruary 25, 2025
• libreoffice, debian linux +1 more URL fetching can be used to exfiltrate arbitrary INI file values and environment variables CVE-2024-12426 Fix available 6.7 MediumJanuary 7, 2025
• libreoffice, debian linux +1 more Path traversal leading to arbitrary .ttf file write CVE-2024-12425 Fix available 2.4 LowJanuary 7, 2025
• libreoffice Signatures in "repair mode" should not be trusted CVE-2024-7788 Fix available 7.8 HighSeptember 17, 2024
• libreoffice Ability to trust not validated macro signatures removed in high security mode CVE-2024-6472 Fix available 7.8 HighAugust 5, 2024
• libreoffice TLS certificate are not properly verified when utilizing LibreOfficeKit CVE-2024-5261 Fix available 10.0 CriticalJune 25, 2024
• libreoffice, debian linux, fedoraproject fedora +2 more Graphic on-click binding allows unchecked script execution CVE-2024-3044 Fix available 6.5 MediumMay 14, 2024
• libreoffice, debian linux, fedoraproject fedora +2 more Link targets allow arbitrary script execution CVE-2023-6186 Fix available 8.3 HighDecember 11, 2023
• libreoffice, debian linux, fedoraproject fedora +2 more Improper input validation enabling arbitrary Gstreamer pipeline injection CVE-2023-6185 Fix available 8.3 HighDecember 11, 2023
• libreoffice, fedora, red hat enterprise linux 6 +4 more +6 more Arbitrary file write CVE-2023-1183 Fix available EPSS 64.9% 5.0 MediumJune 21, 2023
• libreoffice, debian linux +1 more Remote documents loaded without prompt via IFrame CVE-2023-2255 Public exploitFix available 5.3 MediumMay 25, 2023
• libreoffice, debian linux +1 more Array Index UnderFlow in Calc Formula Parsing CVE-2023-0950 Fix available 7.8 HighMay 25, 2023
• libreoffice, debian linux, fedoraproject fedora +2 more Macro URL arbitrary script execution CVE-2022-3140 Fix available 6.3 MediumOctober 11, 2022
• libreoffice, debian linux +1 more Weak Master Keys CVE-2022-26307 Fix available 8.8 HighJuly 25, 2022
• libreoffice, debian linux +1 more Execution of Untrusted Macros Due to Improper Certificate Validation CVE-2022-26306 Fix available 7.5 HighJuly 25, 2022
• libreoffice Execution of Untrusted Macros Due to Improper Certificate Validation CVE-2022-26305 Fix available 7.5 HighJuly 25, 2022
• libreoffice, fedoraproject fedora +1 more Incorrect trust validation of signature with ambiguous KeyInfo children CVE-2021-25636 Fix available 7.5 HighFebruary 22, 2022
• libreoffice Content Manipulation with Certificate Validation Attack CVE-2021-25635 Fix available 5.2 MediumOctober 12, 2021
• libreoffice, debian linux +1 more Timestamp Manipulation with Signature Wrapping CVE-2021-25634 Fix available 7.5 HighOctober 12, 2021
• libreoffice, debian linux +1 more Content Manipulation with Double Certificate Attack CVE-2021-25633 Fix available 7.5 HighOctober 11, 2021
• libreoffice denylist of executable filename extensions possible to bypass under windows CVE-2021-25631 Fix available 8.8 HighMay 3, 2021
• code-industry master pdf editor, foxitsoftware foxit reader, phantompdf +10 more +12 more The Portable Document Format (PDF) specification does not provide any information regarding the... CVE-2018-18688 5.3 MediumJanuary 7, 2021
• libreoffice, fedoraproject fedora, opensuse leap +2 more XForms submissions could overwrite local files CVE-2020-12803 Fix available 6.5 MediumJune 8, 2020
• libreoffice, fedoraproject fedora, opensuse leap +2 more remote graphics contained in docx format retrieved in 'stealth mode' CVE-2020-12802 Fix available 5.3 MediumJune 8, 2020
• libreoffice, opensuse leap +1 more Crash-recovered MSOffice encrypted documents defaulted to not to using encryption on next save CVE-2020-12801 Fix available 5.3 MediumMay 18, 2020
• apache openoffice, libreoffice, debian linux +1 more +3 more LibreOffice and OpenOffice automatically open embedded content CVE-2012-5639 6.5 MediumDecember 20, 2019
• document foundation libreoffice, opensuse leap +1 more Windows 8.3 path equivalence handling flaw allows LibreLogo script execution CVE-2019-9855 Fix available 9.8 CriticalSeptember 6, 2019
• document foundation libreoffice, canonical ubuntu linux, debian linux +3 more +5 more Unsafe URL assembly flaw in allowed script location check CVE-2019-9854 Fix available 7.8 HighSeptember 6, 2019
• document foundation libreoffice Insufficient URL decoding flaw in categorizing macro location CVE-2019-9853 Fix available 7.8 HighAugust 15, 2019
• document foundation libreoffice, canonical ubuntu linux, debian linux +2 more +4 more Insufficient URL encoding flaw in allowed script location check CVE-2019-9852 Fix available 7.8 HighAugust 15, 2019
• document foundation libreoffice, canonical ubuntu linux, debian linux +2 more +4 more LibreLogo global-event script execution CVE-2019-9851 Public exploitFix available EPSS 77.8% 9.8 CriticalAugust 15, 2019
• document foundation libreoffice, canonical ubuntu linux, debian linux +2 more +4 more Insufficient url validation allowing LibreLogo script execution CVE-2019-9850 Fix available 9.8 CriticalAugust 15, 2019
• document foundation libreoffice, canonical ubuntu linux, debian linux +2 more +4 more LibreOffice has a 'stealth mode' in which only documents from locations deemed 'trusted' are... CVE-2019-9849 Public exploitFix available 4.3 MediumJuly 16, 2019
• document foundation libreoffice, canonical ubuntu linux, debian linux +2 more +4 more LibreOffice has a feature where documents can specify that pre-installed scripts can be executed... CVE-2019-9848 Public exploitFix available EPSS 28.9% 9.8 CriticalJuly 16, 2019
• document foundation libreoffice Executable hyperlink targets executed unconditionally on activation CVE-2019-9847 7.8 HighMay 9, 2019
• [unknown] libreoffice It was found that libreoffice before versions 6.0.7 and 6.1.3 was vulnerable to a directory... CVE-2018-16858 Public exploitFix available EPSS 67.3% 7.8 HighFebruary 2, 2019
• libreoffice The get_app_path function in desktop/unx/source/start.c in LibreOffice through 6.0.5 mishandles... CVE-2018-14939 9.8 CriticalAugust 5, 2018
• apache openoffice, libreoffice, canonical ubuntu linux +4 more +6 more An information disclosure vulnerability occurs when LibreOffice 6.0.3 and Apache OpenOffice... CVE-2018-10583 Public exploitFix available EPSS 78.0% 7.5 HighMay 1, 2018
• libreoffice, canonical ubuntu linux, debian linux +3 more +5 more The SwCTBWrapper::Read function in sw/source/filter/ww8/ww8toolbar.cxx in LibreOffice before 5.4... CVE-2018-10120 Fix available 7.8 HighApril 15, 2018
• libreoffice, canonical ubuntu linux, debian linux +3 more +5 more sot/source/sdstor/stgstrms.cxx in LibreOffice before 5.4.5.1 and 6.x before 6.0.1.1 uses an... CVE-2018-10119 Fix available 7.8 HighApril 15, 2018
• libreoffice, canonical ubuntu linux, debian linux +6 more +8 more LibreOffice before 5.4.5 and 6.x before 6.0.1 allows remote attackers to read arbitrary files via... CVE-2018-6871 Public exploitFix available EPSS 22.8% 9.8 CriticalFebruary 9, 2018
• libreoffice, libwpd +1 more WP1StylesListener.cpp, WP5StylesListener.cpp, and WP42StylesListener.cpp in libwpd 0.10.1... CVE-2017-14226 Fix available 7.5 HighSeptember 9, 2017
• libreoffice LibreOffice before 2017-03-17 has an out-of-bounds write caused by a heap-based buffer overflow... CVE-2017-8358 9.8 CriticalApril 30, 2017
• libreoffice LibreOffice before 2017-03-14 has an out-of-bounds write related to the HWPFile::TagsRead... CVE-2017-7882 9.8 CriticalApril 15, 2017
• libreoffice LibreOffice before 2017-03-11 has an out-of-bounds write caused by a heap-based buffer overflow... CVE-2017-7856 9.8 CriticalApril 14, 2017
• libreoffice LibreOffice before 2017-01-02 has an out-of-bounds write caused by a heap-based buffer overflow... CVE-2017-7870 Fix available 9.8 CriticalApril 14, 2017
• Show olderLoading…