TLS certificate are not properly verified when utilizing LibreOfficeKit

RCE via calcext:data-mappings, sql provider and jdbc connector

Heap buffer overflow in Calc formula compilation

Heap Buffer Overflow in AgileEngine

Macro URL arbitrary script execution

Executable hyperlink Windows path targets executed unconditionally on activation

Signatures in "repair mode" should not be trusted

Ability to trust not validated macro signatures removed in high security mode

Heap use-after-free in ODF number-format blank-width parsing

Arbitrary file write via calcext:data-mappings, sql provider and Firebird backup functionality

Environment/ini-file leaks

LFI and GET SSRF via GStreamer and HLS playlists

LFI via calcext:data-mappings, sql provider and sdbc:flat:file:// db href

LFI and GET SSRF via calcext:data-mappings and csv provider

Package URLs can be used to exfiltrate arbitrary INI file values and environment variables

TCC Bypass via Inherited Permissions in Bundled Interpreter

URL fetching can be used to exfiltrate arbitrary INI file values and environment variables

Graphic on-click binding allows unchecked script execution

Macro URL arbitrary script execution

PDF signature forgery with adbe.pkcs7.sha1 SubFilter

Content Manipulation with Certificate Validation Attack

Out of bounds read in PICT image import

Stack buffer overflow in CFF to Type 1 font conversion

Stack buffer overflow in CFF font hint handling

Heap buffer overflow in PDF import stream handling

Heap buffer overflow in PDF import encryption handling

Heap buffer overflow in WMF text record import

Heap buffer overflow in spreadsheet tracked-changes import

Stack buffer overflow in PPT presentation import

Heap buffer overflow in OOXML text box element import

Heap buffer overflow in EMF+ gradient brush import

Heap buffer overflow in DXF polyline import

Path traversal leading to arbitrary .ttf file write