Libreoffice
Approved changes feed: RSS · Atom
cpe:2.3:a:libreoffice:libreoffice:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Libreoffice (fa887e9c-4f16-516a-9e55-896c0be9530d) |
|---|---|
| Product | Libreoffice (86ee1a7e-ade3-54e7-844d-954621f783e8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/libreoffice |
purl2cpe | 2026-06-01 10:13:07.603476 |
pkg:deb/ubuntu/libreoffice |
purl2cpe | 2026-06-01 10:13:07.603478 |
pkg:github/libreoffice/core |
purl2cpe | 2026-06-01 10:13:07.603479 |
pkg:libreoffice/core |
purl2cpe | 2026-06-01 10:13:07.603481 |
pkg:rpm/fedora/libreoffice |
purl2cpe | 2026-06-01 10:13:07.603482 |
pkg:rpm/opensuse/libreoffice |
purl2cpe | 2026-06-01 10:13:07.603483 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-4430 |
vulnerable | 2026-06-08 08:05:13.360847 |
Heap Buffer Overflow in AgileEngine
Out-of-bounds write vulnerability in The Document Foundation LibreOffice via crafted OOXML documents with mismatched encryption salt parameters.
This issue affects LibreOffice: from 26.2 before 26.2.3, from 25.8 before 25.8.7.
Published: 2026-05-07T07:16:18.851Z
Updated: 2026-05-07T13:03:05.876Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2866 |
vulnerable | 2026-06-08 07:16:58.526974 |
PDF signature forgery with adbe.pkcs7.sha1 SubFilter
Improper Verification of Cryptographic Signature vulnerability in LibreOffice allows PDF Signature Spoofing by Improper Validation.
In the affected versions of LibreOffice a flaw in the verification code for adbe.pkcs7.sha1 signatures could cause invalid signatures to be accepted as valid
This issue affects LibreOffice: from 24.8 before < 24.8.6, from 25.2 before < 25.2.2.
Published: 2025-04-27T19:04:52.226Z
Updated: 2025-11-03T19:46:42.576Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-1080 |
vulnerable | 2026-06-08 07:06:36.885050 |
Macro URL arbitrary script execution
LibreOffice supports Office URI Schemes to enable browser integration of LibreOffice with MS SharePoint server. An additional scheme 'vnd.libreoffice.command' specific to LibreOffice was added. In the affected versions of LibreOffice a link in a browser using that scheme could be constructed with an embedded inner URL that when passed to LibreOffice could call internal macros with arbitrary arguments.
This issue affects LibreOffice: from 24.8 before < 24.8.5, from 25.2 before < 25.2.1.
Published: 2025-03-04T20:04:10.946Z
Updated: 2025-11-03T19:35:13.950Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14714 |
vulnerable | 2026-06-08 07:06:34.998034 |
TCC Bypass via Inherited Permissions in Bundled Interpreter
An Authentication Bypass vulnerability existed where the application bundled an interpreter (Python) that inherits the Transparency, Consent, and Control (TCC) permissions granted by the user to the main application bundle
By executing the bundled interpreter directly the attacker's scripts run with the application's TCC privileges
In fixed versions parent-constraints are used to allow only the main application to launch interpreter with those permissions
This issue affects LibreOffice on macOS: from 25.2 before < 25.2.4.
Published: 2025-12-15T10:30:55.796Z
Updated: 2025-12-15T13:13:17.791Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0514 |
vulnerable | 2026-06-08 07:02:24.762460 |
Executable hyperlink Windows path targets executed unconditionally on activation
Improper Input Validation vulnerability in The Document Foundation LibreOffice allows Windows Executable hyperlink targets to be executed unconditionally on activation.This issue affects LibreOffice: from 24.8 before < 24.8.5.
Published: 2025-02-25T21:16:30.521Z
Updated: 2025-02-25T21:29:02.530Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-7788 |
vulnerable | 2026-06-08 06:58:23.436514 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6472 |
vulnerable | 2026-06-08 06:58:19.549046 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5261 |
vulnerable | 2026-06-08 06:56:15.353126 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3044 |
vulnerable | 2026-06-08 06:41:52.268625 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-12426 |
vulnerable | 2026-06-08 06:23:51.930970 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-12425 |
vulnerable | 2026-06-08 06:23:51.923721 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6186 |
vulnerable | 2026-06-08 06:19:46.518719 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6185 |
vulnerable | 2026-06-08 06:19:46.518045 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-2255 |
vulnerable | 2026-06-08 06:02:41.700742 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-1183 |
vulnerable | 2026-06-08 05:52:34.051899 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0950 |
vulnerable | 2026-06-08 05:52:33.500446 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3140 |
vulnerable | 2026-06-08 05:47:19.542454 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-26307 |
vulnerable | 2026-06-08 05:41:50.835314 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-26306 |
vulnerable | 2026-06-08 05:41:50.834945 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-26305 |
vulnerable | 2026-06-08 05:41:50.834498 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-25636 |
vulnerable | 2026-06-08 05:30:41.135279 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-25635 |
vulnerable | 2026-06-08 05:30:41.134909 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-25634 |
vulnerable | 2026-06-08 05:30:41.134334 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-25633 |
vulnerable | 2026-06-08 05:30:41.133645 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-25631 |
vulnerable | 2026-06-08 05:30:41.133158 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-12803 |
vulnerable | 2026-06-08 05:17:59.322863 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-12802 |
vulnerable | 2026-06-08 05:17:59.322170 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-12801 |
vulnerable | 2026-06-08 05:17:59.321658 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9855 |
vulnerable | 2026-06-08 05:14:26.322298 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9854 |
vulnerable | 2026-06-08 05:14:26.321294 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9853 |
vulnerable | 2026-06-08 05:14:26.320667 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9852 |
vulnerable | 2026-06-08 05:14:26.319893 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9851 |
vulnerable | 2026-06-08 05:14:26.318911 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9850 |
vulnerable | 2026-06-08 05:14:26.318124 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9849 |
vulnerable | 2026-06-08 05:14:26.316782 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9848 |
vulnerable | 2026-06-08 05:14:26.315994 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9847 |
vulnerable | 2026-06-08 05:14:26.315304 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-6871 |
vulnerable | 2026-06-08 05:11:54.338445 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16858 |
vulnerable | 2026-06-08 05:11:05.593769 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14939 |
vulnerable | 2026-06-08 05:10:53.696436 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-10120 |
vulnerable | 2026-06-08 05:10:26.360405 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-10119 |
vulnerable | 2026-06-08 05:10:26.358405 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-8358 |
vulnerable | 2026-06-08 05:10:08.097802 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7882 |
vulnerable | 2026-06-08 05:10:06.266146 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7856 |
vulnerable | 2026-06-08 05:10:06.243540 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-14226 |
vulnerable | 2026-06-08 05:08:49.499494 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-4324 |
vulnerable | 2026-06-08 05:07:47.139908 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-0795 |
vulnerable | 2026-06-08 05:07:16.311573 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-0794 |
vulnerable | 2026-06-08 05:07:16.310270 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-5214 |
vulnerable | 2026-06-08 05:06:49.256812 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-5213 |
vulnerable | 2026-06-08 05:06:49.256296 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-5212 |
vulnerable | 2026-06-08 05:06:49.254964 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-4551 |
vulnerable | 2026-06-08 05:06:40.164759 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-1774 |
vulnerable | 2026-06-08 05:06:26.186875 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9093 |
vulnerable | 2026-06-08 05:06:10.882612 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3575 |
vulnerable | 2026-06-08 05:05:33.563498 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3524 |
vulnerable | 2026-06-08 05:05:33.227743 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-4233 |
vulnerable | 2026-06-08 05:02:16.516901 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-2665 |
vulnerable | 2026-06-08 05:02:05.282079 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-2334 |
vulnerable | 2026-06-08 05:02:03.698356 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1149 |
vulnerable | 2026-06-08 05:00:47.796971 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-0037 |
vulnerable | 2026-06-08 04:59:35.706469 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2713 |
vulnerable | 2026-06-08 04:58:08.557311 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2685 |
vulnerable | 2026-06-08 04:58:08.389520 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.