Skip to contentThe Document Foundation Libreoffice vulnerabilities
- the document foundation libreofficeHeap buffer overflow in dBASE index importCVE-2026-76181Fix available5.4 Medium
- the document foundation libreofficeEnvironment/ini-file leaksCVE-2026-63270Fix available6.7 Medium
- the document foundation libreofficeLFI and GET SSRF via GStreamer and HLS playlistsCVE-2026-63269Fix available6.7 Medium
- the document foundation libreofficeLFI via calcext:data-mappings, sql provider and sdbc:flat:file:// db hrefCVE-2026-63268Fix available6.7 Medium
- the document foundation libreofficeLFI and GET SSRF via calcext:data-mappings and csv providerCVE-2026-63267Fix available6.7 Medium
- the document foundation libreofficeArbitrary file write via calcext:data-mappings, sql provider and Firebird backup functionalityCVE-2026-63266Fix available6.8 Medium
- the document foundation libreofficeRCE via calcext:data-mappings, sql provider and jdbc connectorCVE-2026-63277Public exploitFix available8.5 High
- the document foundation libreofficeOut of bounds read in PICT image importCVE-2026-63279Fix available5.4 Medium
- the document foundation libreofficePackage URLs can be used to exfiltrate arbitrary INI file values and environment variablesCVE-2026-63278Fix available6.7 Medium
- the document foundation libreofficeStack buffer overflow in CFF to Type 1 font conversionCVE-2026-63276Fix available5.4 Medium
- the document foundation libreofficeStack buffer overflow in CFF font hint handlingCVE-2026-63275Fix available5.4 Medium
- the document foundation libreofficeHeap buffer overflow in PDF import stream handlingCVE-2026-63274Fix available5.4 Medium
- the document foundation libreofficeHeap buffer overflow in PDF import encryption handlingCVE-2026-63273Fix available5.4 Medium
- the document foundation libreofficeHeap buffer overflow in WMF text record importCVE-2026-63272Fix available5.4 Medium
- the document foundation libreofficeHeap buffer overflow in spreadsheet tracked-changes importCVE-2026-8358Fix available5.4 Medium
- the document foundation libreoffice, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +11 more +13 moreHeap buffer overflow in Calc formula compilationCVE-2026-8357Fix available5.4 Medium
- the document foundation libreofficeStack buffer overflow in PPT presentation importCVE-2026-8356Fix available5.4 Medium
- the document foundation libreofficeHeap buffer overflow in OOXML text box element importCVE-2026-6047Fix available5.4 Medium
- the document foundation libreofficeHeap buffer overflow in EMF+ gradient brush importCVE-2026-6045Fix available5.4 Medium
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +2 more +4 moreHeap use-after-free in ODF number-format blank-width parsingCVE-2026-6040Fix available5.4 Medium
- the document foundation libreofficeHeap buffer overflow in DXF polyline importCVE-2026-6039Fix available5.4 Medium
- libreofficeHeap Buffer Overflow in AgileEngineCVE-2026-4430Fix available5.4 Medium
- libreofficeTCC Bypass via Inherited Permissions in Bundled InterpreterCVE-2025-147140.9 Low
- libreofficePDF signature forgery with adbe.pkcs7.sha1 SubFilterCVE-2025-2866Fix available2.4 Low
- libreoffice, debian linux +1 moreMacro URL arbitrary script executionCVE-2025-1080Fix available7.2 High
- libreofficeExecutable hyperlink Windows path targets executed unconditionally on activationCVE-2025-05147.2 High
- libreoffice, debian linux +1 moreURL fetching can be used to exfiltrate arbitrary INI file values and environment variablesCVE-2024-12426Fix available6.7 Medium
- libreoffice, debian linux +1 morePath traversal leading to arbitrary .ttf file writeCVE-2024-12425Fix available2.4 Low
- libreofficeSignatures in "repair mode" should not be trustedCVE-2024-7788Fix available7.8 High
- libreofficeAbility to trust not validated macro signatures removed in high security modeCVE-2024-6472Fix available7.8 High
- libreofficeTLS certificate are not properly verified when utilizing LibreOfficeKitCVE-2024-5261Fix available10.0 Critical
- libreoffice, debian linux, fedoraproject fedora +2 moreGraphic on-click binding allows unchecked script executionCVE-2024-3044Fix available6.5 Medium
- libreoffice, debian linux, fedoraproject fedora +2 moreLink targets allow arbitrary script executionCVE-2023-6186Fix available8.3 High
- libreoffice, debian linux, fedoraproject fedora +2 moreImproper input validation enabling arbitrary Gstreamer pipeline injectionCVE-2023-6185Fix available8.3 High
- libreoffice, debian linux +1 moreRemote documents loaded without prompt via IFrameCVE-2023-2255Public exploitFix available5.3 Medium
- libreoffice, debian linux +1 moreArray Index UnderFlow in Calc Formula ParsingCVE-2023-0950Fix available7.8 High
- libreoffice, debian linux, fedoraproject fedora +2 moreMacro URL arbitrary script executionCVE-2022-3140Fix available6.3 Medium
- libreoffice, debian linux +1 moreWeak Master KeysCVE-2022-26307Fix available8.8 High
- libreoffice, debian linux +1 moreExecution of Untrusted Macros Due to Improper Certificate ValidationCVE-2022-26306Fix available7.5 High
- libreofficeExecution of Untrusted Macros Due to Improper Certificate ValidationCVE-2022-26305Fix available7.5 High
- libreoffice, fedoraproject fedora +1 moreIncorrect trust validation of signature with ambiguous KeyInfo childrenCVE-2021-25636Fix available7.5 High
- libreofficeContent Manipulation with Certificate Validation AttackCVE-2021-25635Fix available5.2 Medium
- libreoffice, debian linux +1 moreTimestamp Manipulation with Signature WrappingCVE-2021-25634Fix available7.5 High
- libreoffice, debian linux +1 moreContent Manipulation with Double Certificate AttackCVE-2021-25633Fix available7.5 High
- libreofficedenylist of executable filename extensions possible to bypass under windowsCVE-2021-25631Fix available8.8 High
- collabora productivity online, the document foundation libreoffice online +1 more"loolforkit" is a privileged program that is supposed to be run by a special, non-privileged "lool" user. Before doing anything else "loolforkit" checks, if it was invoked by the "lool" user, and refu…CVE-2021-256307.8 High
- libreoffice, fedoraproject fedora, opensuse leap +2 moreXForms submissions could overwrite local filesCVE-2020-12803Fix available6.5 Medium
- libreoffice, fedoraproject fedora, opensuse leap +2 moreremote graphics contained in docx format retrieved in 'stealth mode'CVE-2020-12802Fix available5.3 Medium
- libreoffice, opensuse leap +1 moreCrash-recovered MSOffice encrypted documents defaulted to not to using encryption on next saveCVE-2020-12801Fix available5.3 Medium
- document foundation libreoffice, opensuse leap +1 moreWindows 8.3 path equivalence handling flaw allows LibreLogo script executionCVE-2019-9855Fix available9.8 Critical
- Show olderLoading…