LI
Vendor
Libreoffice
71
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-4430 | LI Libreoffice Libreoffice | 7.8 | May 7 | Heap Buffer Overflow in AgileEngine |
| CVE-2025-14714 | LI Libreoffice Libreoffice | 6.5 | Dec 15 | An Authentication Bypass vulnerability existed where the application bundled an interpreter (Python) that inherits the Transparency, Consent, and Control (TCC) permissions granted… |
| CVE-2025-2866 | LI Libreoffice Libreoffice | 5.5 | Apr 27 | Improper Verification of Cryptographic Signature vulnerability in LibreOffice allows PDF Signature Spoofing by Improper Validation |
| CVE-2021-25635 | LI Libreoffice Libreoffice | 5.5 | Mar 21 | An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to self sign an ODF document, with a signature untrusted by the target, then modify it to… |
| CVE-2025-1080 | LI Libreoffice Libreoffice | 7.8 | Mar 4 | LibreOffice supports Office URI Schemes to enable browser integration of LibreOffice with MS SharePoint server |
| CVE-2025-0514 | LI Libreoffice Libreoffice | 7.8 | Feb 25 | Improper Input Validation vulnerability in The Document Foundation LibreOffice allows Windows Executable hyperlink targets to be executed unconditionally on activation.This issue… |
| CVE-2024-12426 | LI Libreoffice Libreoffice | 6.5 | Jan 7 | URL fetching can be used to exfiltrate arbitrary INI file values and environment variables |
| CVE-2024-12425 | LI Libreoffice Libreoffice | 3.3 | Jan 7 | Path traversal leading to arbitrary .ttf file write |
| CVE-2024-7788 | LI Libreoffice Libreoffice | 7.8 | Sep 17 | Improper Digital Signature Invalidation vulnerability in Zip Repair Mode of The Document Foundation LibreOffice allows Signature forgery vulnerability in LibreOfficeThis issue… |
| CVE-2024-6472 | LI Libreoffice Libreoffice | 7.8 | Aug 5 | Certificate Validation user interface in LibreOffice allows potential vulnerability |
| CVE-2024-5261 | LI Libreoffice Libreoffice | 9.8 | Jun 25 | Improper Certificate Validation vulnerability in LibreOffice "LibreOfficeKit" mode disables TLS certification verification LibreOfficeKit can be used for accessing LibreOffice… |
| CVE-2024-3044 | LI Libreoffice Libreoffice | 6.5 | May 14 | Unchecked script execution in Graphic on-click binding in affected LibreOffice versions allows an attacker to create a document which without prompt will execute scripts… |
| CVE-2023-6186 | LI Libreoffice Libreoffice | 8.8 | Dec 11 | Insufficient macro permission validation of The Document Foundation LibreOffice allows an attacker to execute built-in macros without warning |
| CVE-2023-6185 | LI Libreoffice Libreoffice | 8.8 | Dec 11 | Improper Input Validation vulnerability in GStreamer integration of The Document Foundation LibreOffice allows an attacker to execute arbitrary GStreamer plugins |
| CVE-2023-1183 | LI Libreoffice Libreoffice | 5.5 | Jul 10 | A flaw was found in the Libreoffice package |
| CVE-2023-2255 | LI Libreoffice Libreoffice | 5.3 | May 25 | Improper access control in editor components of The Document Foundation LibreOffice allowed an attacker to craft a document that would cause external links to be loaded without… |
| CVE-2023-0950 | LI Libreoffice Libreoffice | 7.8 | May 25 | Improper Validation of Array Index vulnerability in the spreadsheet component of The Document Foundation LibreOffice allows an attacker to craft a spreadsheet document that will… |
| CVE-2022-3140 | LI Libreoffice Libreoffice | 6.3 | Oct 11 | Macro URL arbitrary script execution |
| CVE-2022-26307 | LI Libreoffice Libreoffice | 8.8 | Jul 25 | LibreOffice supports the storage of passwords for web connections in the user’s configuration database |
| CVE-2022-26306 | LI Libreoffice Libreoffice | 7.5 | Jul 25 | LibreOffice supports the storage of passwords for web connections in the user’s configuration database |
| CVE-2022-26305 | LI Libreoffice Libreoffice | 7.5 | Jul 25 | An Improper Certificate Validation vulnerability in LibreOffice existed where determining if a macro was signed by a trusted author was done by only matching the serial number and… |
| CVE-2021-25636 | LI Libreoffice Libreoffice | 7.5 | Feb 24 | LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and… |
| CVE-2021-25634 | LI Libreoffice Libreoffice | 7.5 | Oct 12 | LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and… |
| CVE-2021-25633 | LI Libreoffice Libreoffice | 7.5 | Oct 11 | LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and… |
| CVE-2021-25631 | LI Libreoffice Libreoffice | 8.8 | May 3 | In the LibreOffice 7-1 series in versions prior to 7.1.2, and in the 7-0 series in versions prior to 7.0.5, the denylist can be circumvented by manipulating the link so it doesn't… |
| CVE-2018-18688 | LI Libreoffice Libreoffice | 5.3 | Jan 7 | The Portable Document Format (PDF) specification does not provide any information regarding the concrete procedure of how to validate signatures |
| CVE-2020-12803 | LI Libreoffice Libreoffice | 6.5 | Jun 8 | ODF documents can contain forms to be filled out by the user |
| CVE-2020-12802 | LI Libreoffice Libreoffice | 5.3 | Jun 8 | LibreOffice has a 'stealth mode' in which only documents from locations deemed 'trusted' are allowed to retrieve remote resources |
| CVE-2020-12801 | LI Libreoffice Libreoffice | 5.3 | May 18 | If LibreOffice has an encrypted document open and crashes, that document is auto-saved encrypted |
| CVE-2012-5639 | LI Libreoffice Libreoffice | 6.5 | Dec 20 | LibreOffice and OpenOffice automatically open embedded content |
| CVE-2019-9853 | LI Libreoffice Libreoffice | 7.8 | Sep 27 | LibreOffice documents can contain macros |
| CVE-2019-9855 | LI Libreoffice Libreoffice | 9.8 | Sep 6 | LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is… |
| CVE-2019-9854 | LI Libreoffice Libreoffice | 7.8 | Sep 6 | LibreOffice has a feature where documents can specify that pre-installed macros can be executed on various script events such as mouse-over, document-open etc |
| CVE-2019-9852 | LI Libreoffice Libreoffice | 7.8 | Aug 15 | LibreOffice has a feature where documents can specify that pre-installed macros can be executed on various script events such as mouse-over, document-open etc |
| CVE-2019-9851 | LI Libreoffice Libreoffice | 9.8 | Aug 15 | LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is… |
| CVE-2019-9850 | LI Libreoffice Libreoffice | 9.8 | Aug 15 | LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is… |
| CVE-2019-9849 | LI Libreoffice Libreoffice | 4.3 | Jul 17 | LibreOffice has a 'stealth mode' in which only documents from locations deemed 'trusted' are allowed to retrieve remote resources |
| CVE-2019-9848 | LI Libreoffice Libreoffice | 9.8 | Jul 17 | LibreOffice has a feature where documents can specify that pre-installed scripts can be executed on various document events such as mouse-over, etc |
| CVE-2019-9847 | LI Libreoffice Libreoffice | 7.8 | May 9 | A vulnerability in LibreOffice hyperlink processing allows an attacker to construct documents containing hyperlinks pointing to the location of an executable on the target users… |
| CVE-2018-16858 | LI Libreoffice Libreoffice | 9.8 | Mar 25 | It was found that libreoffice before versions 6.0.7 and 6.1.3 was vulnerable to a directory traversal attack which could be used to execute arbitrary macros bundled with a… |
| CVE-2018-14939 | LI Libreoffice Libreoffice | 9.8 | Aug 5 | The get_app_path function in desktop/unx/source/start.c in LibreOffice through 6.0.5 mishandles the realpath function in certain environments such as FreeBSD libc, which might… |
| CVE-2018-10583 | LI Libreoffice Libreoffice | 7.5 | May 1 | An information disclosure vulnerability occurs when LibreOffice 6.0.3 and Apache OpenOffice Writer 4.1.5 automatically process and initiate an SMB connection embedded in a… |
| CVE-2018-10120 | LI Libreoffice Libreoffice | 7.8 | Apr 16 | The SwCTBWrapper::Read function in sw/source/filter/ww8/ww8toolbar.cxx in LibreOffice before 5.4.6.1 and 6.x before 6.0.2.1 does not validate a customizations index, which allows… |
| CVE-2018-10119 | LI Libreoffice Libreoffice | 7.8 | Apr 16 | sot/source/sdstor/stgstrms.cxx in LibreOffice before 5.4.5.1 and 6.x before 6.0.1.1 uses an incorrect integer data type in the StgSmallStrm class, which allows remote attackers to… |
| CVE-2018-6871 | LI Libreoffice Libreoffice | 9.8 | Feb 9 | LibreOffice before 5.4.5 and 6.x before 6.0.1 allows remote attackers to read arbitrary files via =WEBSERVICE calls in a document, which use the COM.MICROSOFT.WEBSERVICE function |
| CVE-2017-14226 | LI Libreoffice Libreoffice | 7.5 | Sep 9 | WP1StylesListener.cpp, WP5StylesListener.cpp, and WP42StylesListener.cpp in libwpd 0.10.1 mishandle iterators, which allows remote attackers to cause a denial of service… |
| CVE-2017-8358 | LI Libreoffice Libreoffice | 9.8 | Apr 30 | LibreOffice before 2017-03-17 has an out-of-bounds write caused by a heap-based buffer overflow related to the ReadJPEG function in vcl/source/filter/jpeg/jpegc.cxx |
| CVE-2017-7882 | LI Libreoffice Libreoffice | 9.8 | Apr 15 | LibreOffice before 2017-03-14 has an out-of-bounds write related to the HWPFile::TagsRead function in hwpfilter/source/hwpfile.cxx |
| CVE-2017-7870 | LI Libreoffice Libreoffice | 9.8 | Apr 14 | LibreOffice before 2017-01-02 has an out-of-bounds write caused by a heap-based buffer overflow related to the tools::Polygon::Insert function in tools/source/generic/poly.cxx |
| CVE-2017-7856 | LI Libreoffice Libreoffice | 9.8 | Apr 14 | LibreOffice before 2017-03-11 has an out-of-bounds write caused by a heap-based buffer overflow in the SVMConverter::ImplConvertFromSVM1 function in… |
| CVE-2016-10327 | LI Libreoffice Libreoffice | 9.8 | Apr 14 | LibreOffice before 2016-12-22 has an out-of-bounds write caused by a heap-based buffer overflow related to the EnhWMFReader::ReadEnhWMF function in… |
| CVE-2016-4324 | LI Libreoffice Libreoffice | 7.8 | Jul 8 | Use-after-free vulnerability in LibreOffice before 5.1.4 allows remote attackers to execute arbitrary code via a crafted RTF file, related to stylesheet and superscript tokens |
| CVE-2016-0795 | LI Libreoffice Libreoffice | 7.8 | Feb 18 | LibreOffice before 5.0.5 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted LwpTocSuperLayout record… |
| CVE-2016-0794 | LI Libreoffice Libreoffice | 7.8 | Feb 18 | The lwp filter in LibreOffice before 5.0.4 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted… |
| CVE-2015-5214 | LI Libreoffice Libreoffice | – | Nov 10 | LibreOffice before 4.4.6 and 5.x before 5.0.1 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a denial of service (memory corruption and application crash) or… |
| CVE-2015-5213 | LI Libreoffice Libreoffice | – | Nov 10 | Integer overflow in LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a denial of service (memory corruption and application crash) or… |
| CVE-2015-5212 | LI Libreoffice Libreoffice | – | Nov 10 | Integer underflow in LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2, when the configuration setting "Load printer settings with the document" is enabled, allows… |
| CVE-2015-4551 | LI Libreoffice Libreoffice | – | Nov 10 | LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2 uses the stored LinkUpdateMode configuration information in OpenDocument Format files and templates when handling… |
| CVE-2015-1774 | LI Libreoffice Libreoffice | – | Apr 28 | The HWP filter in LibreOffice before 4.3.7 and 4.4.x before 4.4.2 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a denial of service (crash) or possibly… |
| CVE-2014-9093 | LI Libreoffice Libreoffice | – | Nov 26 | LibreOffice before 4.3.5 allows remote attackers to cause a denial of service (invalid write operation and crash) and possibly execute arbitrary code via a crafted RTF file |