8.3
Élevée
CVE-2023-6186 Insufficient macro permission validation of The Document Foundation LibreOffice allows an attacker to execute built-in…
Description
Insufficient macro permission validation of The Document Foundation LibreOffice allows an attacker to execute built-in macros without warning. In affected versions LibreOffice supports hyperlinks with macro or similar built-in command targets that can be executed when activated without warning the user.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| LibreOffice 7.6 | 7.6 → < 7.6.4 | 7.6.4 |
| LibreOffice 7.5 | 7.5 → < 7.5.9 | 7.5.9 |
Références
- www.libreoffice.org www.libreoffice.org
- www.debian.org www.debian.org
- lists.fedoraproject.org lists.fedoraproject.org
- lists.debian.org lists.debian.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de LibreOffice
Les 48 CVE de LibreOffice →
CVE-2026-76181
Heap buffer overflow in dBASE index import
5.4
Moyenne
CVE-2026-63270
URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information…
6.7
Moyenne
CVE-2026-63269
LibreOffice can link to audio and video files from a document, and on Linux it plays them with GStreamer
6.7
Moyenne
CVE-2026-63267
LibreOffice Calc can link a cell range to an external csv data source, and the link is saved in the document
6.7
Moyenne