LI
Product
LibreOffice
24
CVEs
0
On KEV
8.5
Max CVSS
6
New 30D
Severity mix
Critical 0High 4Medium 20Low 1
Watch
Add LibreOffice to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-63277 | 8.5 | Oct 5 | RCE via calcext:data-mappings, sql provider and jdbc connector Affected: 26.2 before < 26.2.5 |
| CVE-2026-8357 | 7.8 | Jun 15 | Heap buffer overflow in Calc formula compilation Affected: 26.2 before < 26.2.4 |
| CVE-2026-4430 | 7.8 | May 7 | Heap Buffer Overflow in AgileEngine Affected: 26.2 before 26.2.3; 25.8 before 25.8.7 |
| CVE-2026-6040 | 7.3 | Jun 15 | Heap use-after-free in ODF number-format blank-width parsing Affected: 25.8 before < 25.8.7; 26.2 before < 26.2.3 |
| CVE-2026-63266 | 6.8 | Oct 5 | Arbitrary file write via calcext:data-mappings, sql provider and Firebird backup functionality Affected: 26.2 before < 26.2.5 |
| CVE-2026-63270 | 6.7 | Oct 5 | Environment/ini-file leaks Affected: 26.2 before < 26.2.5 |
| CVE-2026-63269 | 6.7 | Oct 5 | LFI and GET SSRF via GStreamer and HLS playlists Affected: 26.2 before < 26.2.5 |
| CVE-2026-63268 | 6.7 | Oct 5 | LFI via calcext:data-mappings, sql provider and sdbc:flat:file:// db href Affected: 26.2 before < 26.2.5 |
| CVE-2026-63267 | 6.7 | Oct 5 | LFI and GET SSRF via calcext:data-mappings and csv provider Affected: 26.2 before < 26.2.5 |
| CVE-2026-63278 | 6.7 | Sep 22 | Package URLs can be used to exfiltrate arbitrary INI file values and environment variables Affected: 26.2 before < 26.2.5 |
| CVE-2025-14714 | 6.5 | Dec 15 | TCC Bypass via Inherited Permissions in Bundled Interpreter Affected: 25.2 before < 25.2.4 |
| CVE-2024-12426 | 6.5 | Jan 7 | URL fetching can be used to exfiltrate arbitrary INI file values and environment variables Affected: 24.8 before < 24.8.4 |
| CVE-2022-3140 | 6.3 | Oct 11 | Macro URL arbitrary script execution Affected: 7.4 before 7.4.1; 7.3 before 7.3.6 |
| CVE-2026-63279 | 5.4 | Sep 22 | Out of bounds read in PICT image import Affected: 26.2 before < 26.2.5 |
| CVE-2026-63276 | 5.4 | Sep 22 | Stack buffer overflow in CFF to Type 1 font conversion Affected: 26.2 before < 26.2.5 |
| CVE-2026-63275 | 5.4 | Sep 22 | Stack buffer overflow in CFF font hint handling Affected: 26.2 before < 26.2.5 |
| CVE-2026-63274 | 5.4 | Sep 22 | Heap buffer overflow in PDF import stream handling Affected: 26.2 before < 26.2.5 |
| CVE-2026-63273 | 5.4 | Sep 22 | Heap buffer overflow in PDF import encryption handling Affected: 26.2 before < 26.2.5 |
| CVE-2026-63272 | 5.4 | Sep 22 | Heap buffer overflow in WMF text record import Affected: 26.2 before < 26.2.5 |
| CVE-2026-8358 | 5.4 | Jun 15 | Heap buffer overflow in spreadsheet tracked-changes import Affected: 25.8 before < 25.8.7; 26.2 before < 26.2.4 |
| CVE-2026-8356 | 5.4 | Jun 15 | Stack buffer overflow in PPT presentation import Affected: 26.2 before < 26.2.4 |
| CVE-2026-6047 | 5.4 | Jun 15 | Heap buffer overflow in OOXML text box element import Affected: 25.8 before < 25.8.7; 26.2 before < 26.2.3 |
| CVE-2026-6045 | 5.4 | Jun 15 | Heap buffer overflow in EMF+ gradient brush import Affected: 25.8 before < 25.8.7; 26.2 before < 26.2.3 |
| CVE-2026-6039 | 5.4 | Jun 15 | Heap buffer overflow in DXF polyline import Affected: 25.8 before < 25.8.7; 26.2 before < 26.2.3 |
| CVE-2024-12425 | 3.3 | Jan 7 | Path traversal leading to arbitrary .ttf file write Affected: 24.8 before < 24.8.4 |
Showing 25