LibreOffice 7.4.0

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:libreoffice:libreoffice:7.4.0:*:*:*:*:*:*:*

part: a version: 7.4.0 update: *

VendorLibreoffice (fa887e9c-4f16-516a-9e55-896c0be9530d)
ProductLibreoffice (86ee1a7e-ade3-54e7-844d-954621f783e8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libreoffice purl2cpe 2026-06-01 10:13:07.756893
pkg:deb/ubuntu/libreoffice purl2cpe 2026-06-01 10:13:07.756894
pkg:github/libreoffice/core purl2cpe 2026-06-01 10:13:07.756895
pkg:libreoffice/core purl2cpe 2026-06-01 10:13:07.756897
pkg:rpm/fedora/libreoffice purl2cpe 2026-06-01 10:13:07.756898
pkg:rpm/opensuse/libreoffice purl2cpe 2026-06-01 10:13:07.756899

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-3140 vulnerable 2026-06-08 05:47:19.543183 Macro URL arbitrary script execution
LibreOffice supports Office URI Schemes to enable browser integration of LibreOffice with MS SharePoint server. An additional scheme 'vnd.libreoffice.command' specific to LibreOffice was added. In the affected versions of LibreOffice links using that scheme could be constructed to call internal macros with arbitrary arguments. Which when clicked on, or activated by document events, could result in arbitrary script execution without warning. This issue affects: The Document Foundation LibreOffice 7.4 versions prior to 7.4.1; 7.3 versions prior to 7.3.6.
Published: 2022-10-11T00:00:00.000Z
Updated: 2024-08-03T01:00:10.521Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.