LI
Product
Libreoffice
71
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 13High 26Medium 15Low 1
Watch
Add Libreoffice to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-14714 | 6.5 | Dec 15 | TCC Bypass via Inherited Permissions in Bundled Interpreter Affected: 25.2.0.1 before 25.2.4.1 |
| CVE-2024-12426 | 6.5 | Jan 7 | URL fetching can be used to exfiltrate arbitrary INI file values and environment variables Affected: 24.8.0.1 before 24.8.4; 24.8.0.0; 24.8.0.0 |
| CVE-2024-3044 | 6.5 | May 14 | Unchecked script execution in Graphic on-click binding in affected LibreOffice versions allows an attacker to create a document which without prompt will execute scripts… Affected: before 7.6.7.1; 24.2.0.0 before 24.2.3.1 |
| CVE-2020-12803 | 6.5 | Jun 8 | ODF documents can contain forms to be filled out by the user Affected: before 6.4.4 |
| CVE-2012-5639 | 6.5 | Dec 20 | LibreOffice and OpenOffice automatically open embedded content Affected: All versions, or not specified |
| CVE-2012-0037 | 6.5 | Jun 17 | Redland Raptor (aka libraptor) before 2.0.7, as used by OpenOffice 3.3 and 3.4 Beta, LibreOffice before 3.4.6 and 3.5.x before 3.5.1, and other products, allows user-assisted… Affected: before 3.4.6; 3.5.0 |
| CVE-2022-3140 | 6.3 | Oct 11 | Macro URL arbitrary script execution Affected: 7.3.0 before 7.3.6; 7.4.0 |
| CVE-2025-2866 | 5.5 | Apr 27 | PDF signature forgery with adbe.pkcs7.sha1 SubFilter Affected: 24.8.0.1 before 24.8.6.0; 25.2.0.1 before 25.2.2; 24.8.0.0; 24.8.0.0; 25.2.0.0; 25.2.0.0 |
| CVE-2021-25635 | 5.5 | Mar 21 | An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to self sign an ODF document, with a signature untrusted by the target, then modify it to… Affected: 7.0.0 before 7.0.5.1; 7.1.0.0 through 7.1.1.1 |
| CVE-2023-1183 | 5.5 | Jul 10 | A flaw was found in the Libreoffice package Affected: before 7.4.6; 7.5.0 |
| CVE-2023-2255 | 5.3 | May 25 | Improper access control in editor components of The Document Foundation LibreOffice allowed an attacker to craft a document that would cause external links to be loaded without… Affected: 7.4.0 before 7.4.7; 7.5.0 before 7.5.3 |
| CVE-2018-18688 | 5.3 | Jan 7 | The Portable Document Format (PDF) specification does not provide any information regarding the concrete procedure of how to validate signatures Affected: 6.0.6.2; 6.1.3.2; 6.0.6.2; 6.1.3.2; 6.1.0.3; 6.1.3.2 |
| CVE-2020-12802 | 5.3 | Jun 8 | LibreOffice has a 'stealth mode' in which only documents from locations deemed 'trusted' are allowed to retrieve remote resources Affected: before 6.4.4 |
| CVE-2020-12801 | 5.3 | May 18 | If LibreOffice has an encrypted document open and crashes, that document is auto-saved encrypted Affected: 6.3.0 before 6.3.6; 6.4.0 before 6.4.3 |
| CVE-2019-9849 | 4.3 | Jul 17 | LibreOffice has a 'stealth mode' in which only documents from locations deemed 'trusted' are allowed to retrieve remote resources Affected: before 6.2.5 |
Showing 15