Document Fdn.

Latest CVEs · RSS

• CVE-2026-63270 2026-10-05 · CVSS 6.7
  URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information could be exfiltrated to a remote server o
• CVE-2026-63269 2026-10-05 · CVSS 6.7
  LibreOffice can link to audio and video files from a document, and on Linux it plays them with GStreamer. A linked media file could be an HLS playlist that made
• CVE-2026-63268 2026-10-05 · CVSS 6.7
  LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A link of the sql type could name a folder of local te
• CVE-2026-63267 2026-10-05 · CVSS 6.7
  LibreOffice Calc can link a cell range to an external csv data source, and the link is saved in the document. Such a link was fetched while the document loaded,
• CVE-2026-63266 2026-10-05 · CVSS 6.8
  LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. Through such a link a document could open an embedded
• CVE-2026-63277 2026-10-05 · CVSS 8.5
  LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A document could name a Java database driver for such
• CVE-2026-63279 2026-09-22 · CVSS 5.4
  LibreOffice can import PICT images, which may be embedded in documents. An out of bounds read existed when importing an image that uses a colour palette. The pa
• CVE-2026-63278 2026-09-22 · CVSS 6.7
  URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information could be exfiltrated to a remote server o
• CVE-2026-63276 2026-09-22 · CVSS 5.4
  LibreOffice converts CFF fonts to Type 1 when it subsets a font, which happens when a document is exported to PDF, and CFF fonts may be embedded in documents. A
• CVE-2026-63275 2026-09-22 · CVSS 5.4
  LibreOffice can read CFF fonts, which may be embedded in documents. A stack buffer overflow existed when reading the hints of a glyph. The number of hints was c
• CVE-2026-63274 2026-09-22 · CVSS 5.4
  LibreOffice Draw can import PDF documents. A heap buffer overflow existed when importing a stream object. The length of the stream was taken from the object's o
• CVE-2026-63273 2026-09-22 · CVSS 5.4
  LibreOffice Draw can import PDF documents. A heap buffer overflow existed when importing an encrypted document. The length of the decryption key was taken from
• CVE-2026-63272 2026-09-22 · CVSS 5.4
  LibreOffice can import WMF graphics, which may be embedded in documents. A heap buffer overflow existed when importing a text record that carries its own charac
• CVE-2026-8358 2026-06-15 · CVSS 5.4
  LibreOffice Calc can import tracked changes from a spreadsheet document. A heap buffer overflow existed when a document reused the same change identifier for tw
• CVE-2026-8357 2026-06-15 · CVSS 5.4
  LibreOffice Calc compiles cell formulas when opening a spreadsheet. A heap buffer overflow existed when compiling a very long formula made up of many opening to
• CVE-2026-8356 2026-06-15 · CVSS 5.4
  LibreOffice can import presentations in the legacy binary PPT format. A stack buffer overflow existed when importing a colour-replacement record. Two fixed-size
• CVE-2026-6047 2026-06-15 · CVSS 5.4
  LibreOffice can import documents in the OOXML format (DOCX). A heap buffer overflow existed when replaying deferred parser events for a text box element. A hand
• CVE-2026-6045 2026-06-15 · CVSS 5.4
  LibreOffice can import EMF+ graphics, which may be embedded in documents. A heap buffer overflow existed when importing an EMF+ gradient brush. The number of gr
• CVE-2026-6040 2026-06-15 · CVSS 5.4
  A heap use-after-free existed when importing the blank-width characters of an ODF number format. A position value read from the document was not checked against
• CVE-2026-6039 2026-06-15 · CVSS 5.4
  LibreOffice can import drawings in the DXF format used by CAD software. A heap buffer overflow existed when importing a DXF polyline. The point count taken from
• CVE-2026-4430 2026-05-07 · CVSS 5.4
  Out-of-bounds write vulnerability in The Document Foundation LibreOffice via crafted OOXML documents with mismatched encryption salt parameters. This issue aff
• CVE-2025-14714 2025-12-15 · CVSS 0.9
  An Authentication Bypass vulnerability existed where the application bundled an interpreter (Python) that inherits the Transparency, Consent, and Control (TCC)
• CVE-2025-2866 2025-04-27 · CVSS 2.4
  Improper Verification of Cryptographic Signature vulnerability in LibreOffice allows PDF Signature Spoofing by Improper Validation. In the affected versions
• CVE-2021-25635 2025-03-21 · CVSS 5.2
  An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to self sign an ODF document, with a signature untrusted by the target, th
• CVE-2025-1080 2025-03-04 · CVSS 7.2
  LibreOffice supports Office URI Schemes to enable browser integration of LibreOffice with MS SharePoint server. An additional scheme 'vnd.libreoffice.command' s