Skip to content

Vulnerabilities of The Document Foundation LibreOffice

Is your version affected?

CVE Summary Score Published
CVE-2025-1080 LibreOffice supports Office URI Schemes to enable browser integration of LibreOffice with MS SharePoint server 7.2 High Mar 4, 2025
CVE-2025-0514 Improper Input Validation vulnerability in The Document Foundation LibreOffice allows Windows Executable hyperlink … 7.2 High Feb 25, 2025
CVE-2024-12426 Exposure of Environmental Variables and arbitrary INI file values to an Unauthorized Actor vulnerability in The Document… 6.7 Medium Jan 7, 2025
CVE-2024-12425 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in The Document… 2.4 Low Jan 7, 2025
CVE-2024-7788 Improper Digital Signature Invalidation  vulnerability in Zip Repair Mode of The Document Foundation LibreOffice… 7.8 High Sep 17, 2024
CVE-2024-6472 Certificate Validation user interface in LibreOffice allows potential vulnerability 7.8 High Aug 5, 2024
CVE-2024-5261 Improper Certificate Validation vulnerability in LibreOffice "LibreOfficeKit" mode disables TLS certification… 10.0 Critical Jun 25, 2024
CVE-2024-3044 Unchecked script execution in Graphic on-click binding in affected LibreOffice versions allows an attacker to create a… 6.5 Medium May 14, 2024
CVE-2023-6186 Insufficient macro permission validation of The Document Foundation LibreOffice allows an attacker to execute built-in… 8.3 High Dec 11, 2023
CVE-2023-6185 Improper Input Validation vulnerability in GStreamer integration of The Document Foundation LibreOffice allows an… 8.3 High Dec 11, 2023
CVE-2023-2255 Improper access control in editor components of The Document Foundation LibreOffice allowed an attacker to craft a… Not rated May 25, 2023
CVE-2023-0950 Improper Validation of Array Index vulnerability in the spreadsheet component of The Document Foundation LibreOffice… 7.8 High May 25, 2023
CVE-2022-3140 LibreOffice supports Office URI Schemes to enable browser integration of LibreOffice with MS SharePoint server Not rated Oct 11, 2022
CVE-2022-26307 LibreOffice supports the storage of passwords for web connections in the user’s configuration database Not rated Jul 25, 2022
CVE-2022-26306 LibreOffice supports the storage of passwords for web connections in the user’s configuration database Not rated Jul 25, 2022
CVE-2022-26305 An Improper Certificate Validation vulnerability in LibreOffice existed where determining if a macro was signed by a… Not rated Jul 25, 2022
CVE-2021-25636 LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no… Not rated Feb 22, 2022
CVE-2021-25634 LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no… Not rated Oct 12, 2021
CVE-2021-25633 LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no… Not rated Oct 11, 2021
CVE-2021-25631 In the LibreOffice 7-1 series in versions prior to 7.1.2, and in the 7-0 series in versions prior to 7.0.5, the denylist… Not rated May 3, 2021
CVE-2020-12803 ODF documents can contain forms to be filled out by the user Not rated Jun 8, 2020
CVE-2020-12802 LibreOffice has a 'stealth mode' in which only documents from locations deemed 'trusted' are allowed to retrieve… Not rated Jun 8, 2020
CVE-2020-12801 If LibreOffice has an encrypted document open and crashes, that document is auto-saved encrypted Not rated May 18, 2020

Other The Document Foundation products