6.5
Medium
CVE-2024-3044 Unchecked script execution in Graphic on-click binding in affected LibreOffice versions allows an attacker to create a…
Description
Unchecked script execution in Graphic on-click binding in affected LibreOffice versions allows an attacker to create a document which without prompt will execute scripts built-into LibreOffice on clicking a graphic. Such scripts were previously deemed trusted but are now deemed untrusted.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| LibreOffice 24.2 | 24.2 → < 24.2.3 | 24.2.3 |
| LibreOffice 7.6 | 7.6 → < 7.6.7 | 7.6.7 |
Other CVEs of LibreOffice
The 48 CVEs of LibreOffice →
CVE-2026-76181
Heap buffer overflow in dBASE index import
5.4
Medium
CVE-2026-63270
URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information…
6.7
Medium
CVE-2026-63269
LibreOffice can link to audio and video files from a document, and on Linux it plays them with GStreamer
6.7
Medium
CVE-2026-63267
LibreOffice Calc can link a cell range to an external csv data source, and the link is saved in the document
6.7
Medium