Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

93 records

Vendor: The Document Foundation Clear all filters
TI-2026-85633 CVE-2026-76181 · GHSA-44mf-p26f-h973

Heap buffer overflow in LibreOffice dBASE index import

Priority LOW 23

LibreOffice includes a dBASE database driver, which reads dBASE tables and their .ndx index files when a folder of dBASE files is used as a data source.

CVSS 4.0MEDIUM 5.4 Local No auth User interaction EPSS 0.00139 Published 2026-11-05 Fixed in < 26.2.6, < 26.8.1 CWE-674
TI-2026-67609 CVE-2026-63270 · GHSA-p537-j8hg-x628

Environment and INI file values leak through LibreOffice documents

Priority LOW 28

URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information could be exfiltrated to a remote server on opening a document containing such links.

CVSS 4.0MEDIUM 6.7 Local Low privileges User interaction EPSS 0.00116 Published 2026-10-05 Partial fix · < 26.2.5 CWE-200
TI-2026-67608 CVE-2026-63269 · GHSA-hx75-xjjr-jmv5

Local file read and SSRF in LibreOffice via HLS playlists

Priority LOW 28

LibreOffice can link to audio and video files from a document, and on Linux it plays them with GStreamer.

CVSS 4.0MEDIUM 6.7 Local Low privileges User interaction EPSS 0.00109 Published 2026-10-05 Partial fix · < 26.2.5 CWE-200
TI-2026-67605 CVE-2026-63266 · GHSA-5436-5r9x-m4jv

Arbitrary file write via LibreOffice Calc data mappings

Priority LOW 29

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document.

CVSS 4.0MEDIUM 6.8 Local No auth User interaction EPSS 0.00156 Published 2026-10-05 Partial fix · < 26.2.5 CWE-22
TI-2026-45135 CVE-2026-63279 · GHSA-v5cv-mqwj-8jgx

Out of bounds read in PICT image import

Priority LOW 23

LibreOffice can import PICT images, which may be embedded in documents.

CVSS 4.0MEDIUM 5.4 Local No auth User interaction EPSS 0.00154 Published 2026-09-22 Fixed in < 26.2.5 CWE-125
TI-2026-45133 CVE-2026-63276 · GHSA-3xpv-4h8q-pj26

Stack buffer overflow in CFF to Type 1 font conversion

Priority LOW 24

LibreOffice converts CFF fonts to Type 1 when it subsets a font, which happens when a document is exported to PDF, and CFF fonts may be embedded in documents.

CVSS 4.0MEDIUM 5.4 Local No auth User interaction EPSS 0.00195 Published 2026-09-22 Partial fix · < 26.2.5 CWE-787
TI-2026-45132 CVE-2026-63275 · GHSA-fh9h-5g6m-wc43

Stack buffer overflow in CFF font hint handling

Priority LOW 24

LibreOffice can read CFF fonts, which may be embedded in documents.

CVSS 4.0MEDIUM 5.4 Local No auth User interaction EPSS 0.00187 Published 2026-09-22 Partial fix · < 26.2.5 CWE-787
TI-2026-45129 CVE-2026-63272 · GHSA-c374-v965-jr6c

Heap buffer overflow in WMF text record import

Priority LOW 24

LibreOffice can import WMF graphics, which may be embedded in documents.

CVSS 4.0MEDIUM 5.4 Local No auth User interaction EPSS 0.00204 Published 2026-09-22 Fixed in < 26.2.5 CWE-125
TI-2026-07351 CVE-2026-8357 · GHSA-j779-pcc6-8c5f

Heap buffer overflow in Calc formula compilation

Priority LOW 24

LibreOffice Calc compiles cell formulas when opening a spreadsheet.

CVSS 4.0MEDIUM 5.4 Local No auth User interaction EPSS 0.00219 Published 2026-06-15 Partial fix · < 26.2.4 CWE-193
TI-2026-07350 CVE-2026-8356 · GHSA-8r7p-3qw5-wxm5

Stack buffer overflow in PPT presentation import

Priority LOW 23

LibreOffice can import presentations in the legacy binary PPT format.

CVSS 4.0MEDIUM 5.4 Local No auth User interaction EPSS 0.00154 Published 2026-06-15 Partial fix · < 26.2.4 CWE-121
TI-2026-05305 CVE-2026-6045 · GHSA-mc63-87jp-8648

Heap buffer overflow in EMF+ gradient brush import

Priority LOW 24

LibreOffice can import EMF+ graphics, which may be embedded in documents.

CVSS 4.0MEDIUM 5.4 Local No auth User interaction EPSS 0.00208 Published 2026-06-15 Partial fix · < 25.8.7, < 26.2.3 CWE-190
TI-2026-05300 CVE-2026-6039 · GHSA-5jvm-83q6-h5jj

Heap buffer overflow in DXF polyline import

Priority LOW 24

LibreOffice can import drawings in the DXF format used by CAD software.

CVSS 4.0MEDIUM 5.4 Local No auth User interaction EPSS 0.00197 Published 2026-06-15 Partial fix · < 25.8.7, < 26.2.3 CWE-197
TI-2026-03842 CVE-2026-4430 · GHSA-cwgp-8p97-cf77

Heap Buffer Overflow in AgileEngine

Priority LOW 23

Out-of-bounds write vulnerability in The Document Foundation LibreOffice via crafted OOXML documents with mismatched encryption salt parameters.

CVSS 4.0MEDIUM 5.4 Local No auth User interaction EPSS 0.00078 Published 2026-05-07 Partial fix · 26.2.3, 25.8.7 CWE-787
TI-2025-13436 CVE-2025-14714 · GHSA-65c5-j3wr-v7fh

TCC Bypass via Inherited Permissions in Bundled Interpreter

Priority LOW 5

An Authentication Bypass vulnerability existed where the application bundled an interpreter (Python) that inherits the Transparency, Consent, and Control (TCC) permissions granted by the user to the main application bund…

CVSS 4.0LOW 0.9 Local Low privileges No interaction EPSS 0.00135 Published 2025-12-15 Partial fix · < 25.2.4 CWE-288
TI-2025-02503 CVE-2025-2866 · GHSA-22mj-r7hq-f9h2

PDF signature forgery with adbe.pkcs7.sha1 SubFilter

Priority LOW 11

Improper Verification of Cryptographic Signature vulnerability in LibreOffice allows PDF Signature Spoofing by Improper Validation.

CVSS 4.0LOW 2.4 Local Low privileges User interaction EPSS 0.00117 Published 2025-04-27 Partial fix · < 24.8.6, < 25.2.2 CWE-347
TI-2021-07771 CVE-2021-25635 · GHSA-r73f-2rxh-prfm

Content Manipulation with Certificate Validation Attack

Priority LOW 25

An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to self sign an ODF document, with a signature untrusted by the target, then modify it to change the signature algorithm to an invalid (…

CVSS 4.0MEDIUM 5.2 Local No auth User interaction EPSS 0.00138 Published 2025-03-21 Partial fix · 7.0.5, 7.1.1 CWE-295
Load more