LI
Product
Libreoffice
71
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 13High 26Medium 15Low 1
Watch
Add Libreoffice to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-5261 | 9.8 | Jun 25 | Improper Certificate Validation vulnerability in LibreOffice "LibreOfficeKit" mode disables TLS certification verification LibreOfficeKit can be used for accessing LibreOffice… Affected: before 24.2.4 |
| CVE-2019-9855 | 9.8 | Sep 6 | LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is… Affected: 6.2.0 before 6.2.7; 6.3.0 before 6.3.1 |
| CVE-2019-9851 | 9.8 | Aug 15 | LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is… Affected: before 6.2.6 |
| CVE-2019-9850 | 9.8 | Aug 15 | LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is… Affected: before 6.2.6 |
| CVE-2019-9848 | 9.8 | Jul 17 | LibreOffice has a feature where documents can specify that pre-installed scripts can be executed on various document events such as mouse-over, etc Affected: before 6.2.5 |
| CVE-2018-16858 | 9.8 | Mar 25 | It was found that libreoffice before versions 6.0.7 and 6.1.3 was vulnerable to a directory traversal attack which could be used to execute arbitrary macros bundled with a… Affected: before 6.0.7; 6.1.0 before 6.1.3 |
| CVE-2018-14939 | 9.8 | Aug 5 | The get_app_path function in desktop/unx/source/start.c in LibreOffice through 6.0.5 mishandles the realpath function in certain environments such as FreeBSD libc, which might… Affected: through 6.0.5 |
| CVE-2018-6871 | 9.8 | Feb 9 | LibreOffice before 5.4.5 and 6.x before 6.0.1 allows remote attackers to read arbitrary files via =WEBSERVICE calls in a document, which use the COM.MICROSOFT.WEBSERVICE function Affected: before 5.4.5; 6.0.0; 6.0.0; 6.0.0; 6.0.0 |
| CVE-2017-8358 | 9.8 | Apr 30 | LibreOffice before 2017-03-17 has an out-of-bounds write caused by a heap-based buffer overflow related to the ReadJPEG function in vcl/source/filter/jpeg/jpegc.cxx Affected: through 5.2.6 |
| CVE-2017-7882 | 9.8 | Apr 15 | LibreOffice before 2017-03-14 has an out-of-bounds write related to the HWPFile::TagsRead function in hwpfilter/source/hwpfile.cxx Affected: through 5.2.6 |
| CVE-2017-7870 | 9.8 | Apr 14 | LibreOffice before 2017-01-02 has an out-of-bounds write caused by a heap-based buffer overflow related to the tools::Polygon::Insert function in tools/source/generic/poly.cxx Affected: through 5.3.0.0 |
| CVE-2017-7856 | 9.8 | Apr 14 | LibreOffice before 2017-03-11 has an out-of-bounds write caused by a heap-based buffer overflow in the SVMConverter::ImplConvertFromSVM1 function in… Affected: through 5.2.6.1 |
| CVE-2016-10327 | 9.8 | Apr 14 | LibreOffice before 2016-12-22 has an out-of-bounds write caused by a heap-based buffer overflow related to the EnhWMFReader::ReadEnhWMF function in… Affected: through 5.3.0.0 |
Showing 13