TD
Vendor
The Document Foundation
33
CVEs
0
On KEV
6
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-63270 | LI LibreOffice The Document Foundation | 6.7 | Oct 5 | Environment/ini-file leaks |
| CVE-2026-63269 | LI LibreOffice The Document Foundation | 6.7 | Oct 5 | LFI and GET SSRF via GStreamer and HLS playlists |
| CVE-2026-63268 | LI LibreOffice The Document Foundation | 6.7 | Oct 5 | LFI via calcext:data-mappings, sql provider and sdbc:flat:file:// db href |
| CVE-2026-63267 | LI LibreOffice The Document Foundation | 6.7 | Oct 5 | LFI and GET SSRF via calcext:data-mappings and csv provider |
| CVE-2026-63266 | LI LibreOffice The Document Foundation | 6.8 | Oct 5 | Arbitrary file write via calcext:data-mappings, sql provider and Firebird backup functionality |
| CVE-2026-63277 | LI LibreOffice The Document Foundation | 8.5 | Oct 5 | RCE via calcext:data-mappings, sql provider and jdbc connector |
| CVE-2026-63279 | LI LibreOffice The Document Foundation | 5.4 | Sep 22 | Out of bounds read in PICT image import |
| CVE-2026-63278 | LI LibreOffice The Document Foundation | 6.7 | Sep 22 | Package URLs can be used to exfiltrate arbitrary INI file values and environment variables |
| CVE-2026-63276 | LI LibreOffice The Document Foundation | 5.4 | Sep 22 | Stack buffer overflow in CFF to Type 1 font conversion |
| CVE-2026-63275 | LI LibreOffice The Document Foundation | 5.4 | Sep 22 | Stack buffer overflow in CFF font hint handling |
| CVE-2026-63274 | LI LibreOffice The Document Foundation | 5.4 | Sep 22 | Heap buffer overflow in PDF import stream handling |
| CVE-2026-63273 | LI LibreOffice The Document Foundation | 5.4 | Sep 22 | Heap buffer overflow in PDF import encryption handling |
| CVE-2026-63272 | LI LibreOffice The Document Foundation | 5.4 | Sep 22 | Heap buffer overflow in WMF text record import |
| CVE-2026-8358 | LI LibreOffice The Document Foundation | 5.4 | Jun 15 | Heap buffer overflow in spreadsheet tracked-changes import |
| CVE-2026-8357 | LI LibreOffice The Document Foundation | 7.8 | Jun 15 | Heap buffer overflow in Calc formula compilation |
| CVE-2026-8356 | LI LibreOffice The Document Foundation | 5.4 | Jun 15 | Stack buffer overflow in PPT presentation import |
| CVE-2026-6047 | LI LibreOffice The Document Foundation | 5.4 | Jun 15 | Heap buffer overflow in OOXML text box element import |
| CVE-2026-6045 | LI LibreOffice The Document Foundation | 5.4 | Jun 15 | Heap buffer overflow in EMF+ gradient brush import |
| CVE-2026-6040 | LI LibreOffice The Document Foundation | 7.3 | Jun 15 | Heap use-after-free in ODF number-format blank-width parsing |
| CVE-2026-6039 | LI LibreOffice The Document Foundation | 5.4 | Jun 15 | Heap buffer overflow in DXF polyline import |
| CVE-2026-4430 | LI LibreOffice The Document Foundation | 7.8 | May 7 | Heap Buffer Overflow in AgileEngine |
| CVE-2025-14714 | LI LibreOffice The Document Foundation | 6.5 | Dec 15 | TCC Bypass via Inherited Permissions in Bundled Interpreter |
| CVE-2025-2866 | LI LibreOffice The Document Foundation | 5.5 | Apr 27 | PDF signature forgery with adbe.pkcs7.sha1 SubFilter |
| CVE-2021-25635 | LI LibreOffice The Document Foundation | 5.5 | Mar 21 | Content Manipulation with Certificate Validation Attack |
| CVE-2025-1080 | LI LibreOffice The Document Foundation | 7.8 | Mar 4 | Macro URL arbitrary script execution |
| CVE-2025-0514 | LI LibreOffice The Document Foundation | 7.8 | Feb 25 | Executable hyperlink Windows path targets executed unconditionally on activation |
| CVE-2024-12426 | LI LibreOffice The Document Foundation | 6.5 | Jan 7 | URL fetching can be used to exfiltrate arbitrary INI file values and environment variables |
| CVE-2024-12425 | LI LibreOffice The Document Foundation | 3.3 | Jan 7 | Path traversal leading to arbitrary .ttf file write |
| CVE-2024-7788 | LI LibreOffice The Document Foundation | 7.8 | Sep 17 | Signatures in "repair mode" should not be trusted |
| CVE-2024-6472 | LI LibreOffice The Document Foundation | 7.8 | Aug 5 | Ability to trust not validated macro signatures removed in high security mode |
| CVE-2024-5261 | LI LibreOffice The Document Foundation | 9.8 | Jun 25 | TLS certificate are not properly verified when utilizing LibreOfficeKit |
| CVE-2024-3044 | LI LibreOffice The Document Foundation | 6.5 | May 14 | Graphic on-click binding allows unchecked script execution |
| CVE-2022-3140 | LI LibreOffice The Document Foundation | 6.3 | Oct 11 | Macro URL arbitrary script execution |