libreoffice Vulnerability Advisory Catalog

Total 55 security vulnerabilities recorded for libreoffice software and firmware.

← Back to All Vendors
Component: libreoffice

Out-of-bounds write vulnerability in The Document Foundation LibreOffice via crafted OOXML documents with mismatched encryption salt parameters. This...

๐Ÿ“… 2026-05-07
CVSS 7.8 Dossier →
Component: libreoffice

An Authentication Bypass vulnerability existed where the application bundled an interpreter (Python) that inherits the Transparency, Consent, and Cont...

๐Ÿ“… 2025-12-15
CVSS 6.5 Dossier →
CVE-2025-2866 MEDIUM
Component: libreoffice

Improper Verification of Cryptographic Signature vulnerability in LibreOffice allows PDF Signature Spoofing by Improper Validation. In the affecte...

๐Ÿ“… 2025-04-27
CVSS 5.5 Dossier →
Component: libreoffice

An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to self sign an ODF document, with a signature untrusted by the ...

๐Ÿ“… 2025-03-21
CVSS 5.5 Dossier →
Component: libreoffice

LibreOffice supports Office URI Schemes to enable browser integration of LibreOffice with MS SharePoint server. An additional scheme 'vnd.libreoffice....

๐Ÿ“… 2025-03-04
CVSS 7.8 Dossier →
Component: libreoffice

Improper Input Validation vulnerability in The Document Foundation LibreOffice allows Windows Executable hyperlink targets to be executed uncondition...

๐Ÿ“… 2025-02-25
CVSS 7.8 Dossier →
Component: libreoffice

Exposure of Environmental Variables and arbitrary INI file values to an Unauthorized Actor vulnerability in The Document Foundation LibreOffice. U...

๐Ÿ“… 2025-01-07
CVSS 6.5 Dossier →
Component: libreoffice

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in The Document Foundation LibreOffice allows Absolute Pa...

๐Ÿ“… 2025-01-07
CVSS 3.3 Dossier →
Component: libreoffice

Improper Digital Signature Invalidationย  vulnerability in Zip Repair Mode of The Document Foundation LibreOffice allows Signature forgery vulnerabilit...

๐Ÿ“… 2024-09-17
CVSS 7.8 Dossier →
Component: libreoffice

Certificate Validation user interface in LibreOffice allows potential vulnerability. Signed macros are scripts that have been digitally signed by ...

๐Ÿ“… 2024-08-05
CVSS 7.8 Dossier →
CVE-2024-5261 CRITICAL
Component: libreoffice

Improper Certificate Validation vulnerability in LibreOffice "LibreOfficeKit" mode disables TLS certification verification LibreOfficeKit can be used...

๐Ÿ“… 2024-06-25
CVSS 9.8 Dossier →
CVE-2024-3044 MEDIUM
Component: libreoffice

Unchecked script execution in Graphic on-click binding in affected LibreOffice versions allows an attacker to create a document which without prompt w...

๐Ÿ“… 2024-05-14
CVSS 6.5 Dossier →
Component: libreoffice

Insufficient macro permission validation of The Document Foundation LibreOffice allows an attacker to execute built-in macros without warning. In aff...

๐Ÿ“… 2023-12-11
CVSS 8.3 Dossier →
Component: libreoffice

Improper Input Validation vulnerability in GStreamer integration of The Document Foundation LibreOffice allows an attacker to execute arbitrary GStrea...

๐Ÿ“… 2023-12-11
CVSS 8.3 Dossier →
CVE-2023-1183 MEDIUM
Component: libreoffice

A flaw was found in the Libreoffice package. An attacker can craft an odb containing a "database/script" file with a SCRIPT command where the contents...

๐Ÿ“… 2023-07-10
CVSS 5.0 Dossier →
CVE-2023-2255 MEDIUM
Component: libreoffice

Improper access control in editor components of The Document Foundation LibreOffice allowed an attacker to craft a document that would cause external ...

๐Ÿ“… 2023-05-25
CVSS 5.3 Dossier →
Component: libreoffice

Improper Validation of Array Index vulnerability in the spreadsheet component of The Document Foundation LibreOffice allows an attacker to craft a spr...

๐Ÿ“… 2023-05-25
CVSS 7.8 Dossier →
CVE-2022-3140 MEDIUM
Component: libreoffice

LibreOffice supports Office URI Schemes to enable browser integration of LibreOffice with MS SharePoint server. An additional scheme 'vnd.libreoffice....

๐Ÿ“… 2022-10-11
CVSS 6.3 Dossier →
Component: libreoffice

LibreOffice supports the storage of passwords for web connections in the userโ€™s configuration database. The stored passwords are encrypted with a sing...

๐Ÿ“… 2022-07-25
CVSS 8.8 Dossier →
Component: libreoffice

LibreOffice supports the storage of passwords for web connections in the userโ€™s configuration database. The stored passwords are encrypted with a sing...

๐Ÿ“… 2022-07-25
CVSS 7.5 Dossier →
Component: libreoffice

An Improper Certificate Validation vulnerability in LibreOffice existed where determining if a macro was signed by a trusted author was done by only m...

๐Ÿ“… 2022-07-25
CVSS 7.5 Dossier →
Component: libreoffice

LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurr...

๐Ÿ“… 2022-02-24
CVSS 7.5 Dossier →
Component: libreoffice

LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurr...

๐Ÿ“… 2021-10-12
CVSS 7.5 Dossier →
Component: libreoffice

LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurr...

๐Ÿ“… 2021-10-11
CVSS 7.5 Dossier →
Page 1 of 3 (55 Total Records)