Remote Code Execution via LibreOffice EMF+ Integer Overflow (CVE‑2026‑6045)
What It Is – A newly disclosed integer‑overflow flaw in the EMF+ image parser of LibreOffice ODT files allows an attacker to execute arbitrary code on the victim’s machine. The vulnerability is tracked as CVE‑2026‑6045 and carries a CVSS 7.8 (High) rating.
Exploitability – The bug is locally exploitable after a user opens a malicious ODT file or visits a crafted web page that triggers the parser. No public exploit code is known, but the required user interaction (UI:R) makes the risk realistic for targeted phishing or drive‑by scenarios.
Affected Products – All current releases of LibreOffice (the open‑source office suite) are impacted until the vendor‑released patch is applied.
Why It Matters for Trust & Control Assurance
- Demonstrates the need for a vulnerability‑management control that ensures timely patching of third‑party software across the enterprise.
- Highlights the importance of continuous evidence collection (e.g., patch‑status dashboards) to prove due diligence during audits.
- Reinforces that audit‑ready logging of software inventory and update actions is a core trust signal for buyers and regulators.
Recommended Actions
- Deploy the LibreOffice security update released on 2026‑10‑16 to all endpoints.
- Verify the installed version via automated inventory tools and document the remediation in your control evidence repository.
- Enable logging of file‑open events for ODT documents and monitor for anomalous activity.
- Incorporate this CVE into your vulnerability‑scanning schedule and risk register.