LI
Product
Libreoffice
71
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 13High 26Medium 15Low 1
Watch
Add Libreoffice to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-18688 | 5.3 | Jan 7 | The Portable Document Format (PDF) specification does not provide any information regarding the concrete procedure of how to validate signatures Affected: 6.0.6.2; 6.1.3.2; 6.0.6.2; 6.1.3.2; 6.1.0.3; 6.1.3.2 |
| CVE-2020-12802 | 5.3 | Jun 8 | LibreOffice has a 'stealth mode' in which only documents from locations deemed 'trusted' are allowed to retrieve remote resources Affected: before 6.4.4 |
| CVE-2020-12801 | 5.3 | May 18 | If LibreOffice has an encrypted document open and crashes, that document is auto-saved encrypted Affected: 6.3.0 before 6.3.6; 6.4.0 before 6.4.3 |
| CVE-2019-9849 | 4.3 | Jul 17 | LibreOffice has a 'stealth mode' in which only documents from locations deemed 'trusted' are allowed to retrieve remote resources Affected: before 6.2.5 |
| CVE-2024-12425 | 3.3 | Jan 7 | Path traversal leading to arbitrary .ttf file write Affected: 24.8.0.1 before 24.8.4; 24.8.0.0; 24.8.0.0 |
| CVE-2015-5214 | – | Nov 10 | LibreOffice before 4.4.6 and 5.x before 5.0.1 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a denial of service (memory corruption and application crash) or… Affected: through 4.4.5 |
| CVE-2015-5213 | – | Nov 10 | Integer overflow in LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a denial of service (memory corruption and application crash) or… Affected: through 4.4.4 |
| CVE-2015-5212 | – | Nov 10 | Integer underflow in LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2, when the configuration setting "Load printer settings with the document" is enabled, allows… Affected: through 4.4.4 |
| CVE-2015-4551 | – | Nov 10 | LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2 uses the stored LinkUpdateMode configuration information in OpenDocument Format files and templates when handling… Affected: through 4.4.4 |
| CVE-2015-1774 | – | Apr 28 | The HWP filter in LibreOffice before 4.3.7 and 4.4.x before 4.4.2 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a denial of service (crash) or possibly… Affected: through 4.3.6; 4.4.0; 4.4.1 |
| CVE-2014-9093 | – | Nov 26 | LibreOffice before 4.3.5 allows remote attackers to cause a denial of service (invalid write operation and crash) and possibly execute arbitrary code via a crafted RTF file Affected: through 4.3.4 |
| CVE-2014-3693 | – | Nov 7 | Use-after-free vulnerability in the socket manager of Impress Remote in LibreOffice 4.x before 4.2.7 and 4.3.x before 4.3.3 allows remote attackers to cause a denial of service… Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.3.3; 4.0.4.2; +15 more |
| CVE-2014-3575 | – | Aug 27 | The OLE preview generation in Apache OpenOffice before 4.1.1 and OpenOffice.org (OOo) might allow remote attackers to embed arbitrary data into documents via crafted OLE objects Affected: before 4.2.6; 4.3.0 before 4.3.1 |
| CVE-2014-3524 | – | Aug 26 | Apache OpenOffice before 4.1.1 allows remote attackers to execute arbitrary commands and possibly have other unspecified impact via a crafted Calc spreadsheet Affected: before 4.2.6; 4.3.0 before 4.3.1 |
| CVE-2014-0247 | – | Jul 3 | LibreOffice 4.2.4 executes unspecified VBA macros automatically, which has unspecified impact and attack vectors, possibly related to doc/docmacromode.cxx Affected: 4.2.4 |
| CVE-2012-4233 | – | Nov 19 | LibreOffice 3.5.x before 3.5.7.2 and 3.6.x before 3.6.1, and OpenOffice.org (OOo), allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted… Affected: through 3.6; 3.5; 3.5.; 3.5.0; 3.5.0; 3.5.0; +20 more |
| CVE-2012-2665 | – | Aug 6 | Multiple heap-based buffer overflows in the XML manifest encryption tag parsing functionality in OpenOffice.org and LibreOffice before 3.5.5 allow remote attackers to cause a… Affected: before 3.5.5 |
| CVE-2012-1149 | – | Jun 21 | Integer overflow in the vclmi.dll module in OpenOffice.org (OOo) 3.3, 3.4 Beta, and possibly earlier, and LibreOffice before 3.5.3, allows remote attackers to cause a denial of… Affected: through 3.5.2 |
| CVE-2012-2334 | – | Jun 19 | Integer overflow in filter/source/msfilter/msdffimp.cxx in OpenOffice.org (OOo) 3.3, 3.4 Beta, and possibly earlier, and LibreOffice before 3.5.3, allows remote attackers to cause… Affected: through 3.5.2; 3.3.0; 3.3.1; 3.3.2; 3.3.3; 3.3.4; +5 more |
| CVE-2011-2713 | – | Oct 21 | oowriter in OpenOffice.org 3.3.0 and LibreOffice before 3.4.3 allows user-assisted remote attackers to cause a denial of service (crash) via a crafted DOC file that triggers an… Affected: through 3.4.2; 3.3.0; 3.3.1; 3.3.2; 3.3.3; 3.3.4; +2 more |
| CVE-2011-2685 | – | Jul 21 | Stack-based buffer overflow in the Lotus Word Pro import filter in LibreOffice before 3.3.3 allows remote attackers to execute arbitrary code via a crafted .lwp file Affected: through 3.3.2; 3.3.0; 3.3.1 |