Vulnerabilities

TI-2026-05307 CVE-2026-6047 · GHSA-wq72-h3fh-w757

Heap buffer overflow in OOXML text box element import

LOW 23

LibreOffice can import documents in the OOXML format (DOCX).

CVSS 4.0MEDIUM 5.4 Local No auth User interaction EPSS 0.00154 Published 2026-06-15 Partial fix · < 25.8.7, < 26.2.3 CWE-787

TI-2026-05305 CVE-2026-6045 · GHSA-mc63-87jp-8648

LOW 24

LibreOffice can import EMF+ graphics, which may be embedded in documents.

CVSS 4.0MEDIUM 5.4 Local No auth User interaction EPSS 0.00208 Published 2026-06-15 Partial fix · < 25.8.7, < 26.2.3 CWE-190

TI-2026-05301 CVE-2026-6040 · GHSA-pp4w-c8m6-4xvf

LOW 24

A heap use-after-free existed when importing the blank-width characters of an ODF number format.

CVSS 4.0MEDIUM 5.4 Local No auth User interaction EPSS 0.00159 Published 2026-06-15 Partial fix · < 25.8.7, < 26.2.3 CWE-416

TI-2026-05300 CVE-2026-6039 · GHSA-5jvm-83q6-h5jj

LOW 24

LibreOffice can import drawings in the DXF format used by CAD software.

CVSS 4.0MEDIUM 5.4 Local No auth User interaction EPSS 0.00197 Published 2026-06-15 Partial fix · < 25.8.7, < 26.2.3 CWE-197