8.3
High
CVE-2023-6186 Insufficient macro permission validation of The Document Foundation LibreOffice allows an attacker to execute built-in…
Description
Insufficient macro permission validation of The Document Foundation LibreOffice allows an attacker to execute built-in macros without warning. In affected versions LibreOffice supports hyperlinks with macro or similar built-in command targets that can be executed when activated without warning the user.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| LibreOffice 7.6 | 7.6 → < 7.6.4 | 7.6.4 |
| LibreOffice 7.5 | 7.5 → < 7.5.9 | 7.5.9 |
References
- www.libreoffice.org www.libreoffice.org
- www.debian.org www.debian.org
- lists.fedoraproject.org lists.fedoraproject.org
- lists.debian.org lists.debian.org
Timeline
- Published
- Last modified
Other CVEs of LibreOffice
The 48 CVEs of LibreOffice →
CVE-2026-76181
Heap buffer overflow in dBASE index import
5.4
Medium
CVE-2026-63270
URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information…
6.7
Medium
CVE-2026-63269
LibreOffice can link to audio and video files from a document, and on Linux it plays them with GStreamer
6.7
Medium
CVE-2026-63267
LibreOffice Calc can link a cell range to an external csv data source, and the link is saved in the document
6.7
Medium