The Document Foundation LibreOffice

• CVE-2026-76181 Medium 6.6 Heap buffer overflow in dBASE index import 0.1%
• CVE-2026-63270 Medium 6.7 Environment/ini-file leaks 0.1%
• CVE-2026-63269 Medium 6.7 LFI and GET SSRF via GStreamer and HLS playlists 0.1%
• CVE-2026-63268 Medium 6.7 LFI via calcext:data-mappings, sql provider and sdbc:flat:file:// db href 0.1%
• CVE-2026-63267 Medium 6.7 LFI and GET SSRF via calcext:data-mappings and csv provider 0.1%
• CVE-2026-63266 Medium 6.8 Arbitrary file write via calcext:data-mappings, sql provider and Firebird backup functionality 0.2%
• CVE-2026-63277 High 8.5 RCE via calcext:data-mappings, sql provider and jdbc connector 0.3%
• CVE-2026-63279 Medium 5.4 Out of bounds read in PICT image import 0.2%
• CVE-2026-63278 Medium 6.7 Package URLs can be used to exfiltrate arbitrary INI file values and environment variables 0.1%
• CVE-2026-63276 Medium 5.4 Stack buffer overflow in CFF to Type 1 font conversion 0.2%
• CVE-2026-63275 Medium 5.4 Stack buffer overflow in CFF font hint handling 0.2%
• CVE-2026-63274 Medium 5.4 Heap buffer overflow in PDF import stream handling 0.2%
• CVE-2026-63273 Medium 5.4 Heap buffer overflow in PDF import encryption handling 0.1%
• CVE-2026-63272 Medium 5.4 Heap buffer overflow in WMF text record import 0.2%
• CVE-2026-8358 Medium 5.4 Heap buffer overflow in spreadsheet tracked-changes import 0.2%
• CVE-2026-8357 High 7.8 Heap buffer overflow in Calc formula compilation 0.2%
• CVE-2026-8356 Medium 5.4 Stack buffer overflow in PPT presentation import 0.2%
• CVE-2026-6047 Medium 5.4 Heap buffer overflow in OOXML text box element import 0.2%
• CVE-2026-6045 Medium 5.4 Heap buffer overflow in EMF+ gradient brush import 0.2%
• CVE-2026-6040 High 7.3 Heap use-after-free in ODF number-format blank-width parsing 0.2%
• CVE-2026-6039 Medium 5.4 Heap buffer overflow in DXF polyline import 0.2%
• CVE-2026-4430 Medium 5.4 Heap Buffer Overflow in AgileEngine <0.1%
• CVE-2025-14714 Low 0.9 TCC Bypass via Inherited Permissions in Bundled Interpreter 0.1%
• CVE-2025-2866 Low 2.4 PDF signature forgery with adbe.pkcs7.sha1 SubFilter 0.1%
• CVE-2021-25635 Medium 5.2 Content Manipulation with Certificate Validation Attack 0.1%
• CVE-2025-1080 High 7.2 Macro URL arbitrary script execution 0.3%
• CVE-2025-0514 High 7.2 Executable hyperlink Windows path targets executed unconditionally on activation 0.3%
• CVE-2024-12426 Medium 6.7 URL fetching can be used to exfiltrate arbitrary INI file values and environment variables 0.5%
• CVE-2024-12425 Low 2.4 Path traversal leading to arbitrary .ttf file write 0.3%
• CVE-2024-7788 High 7.8 Signatures in "repair mode" should not be trusted 0.2%
• CVE-2024-6472 High 7.8 Ability to trust not validated macro signatures removed in high security mode 0.2%
• CVE-2024-5261 Critical 10.0 TLS certificate are not properly verified when utilizing LibreOfficeKit 0.4%
• CVE-2024-3044 Medium 6.5 Graphic on-click binding allows unchecked script execution 1.0%
• CVE-2023-6186 High 8.3 Link targets allow arbitrary script execution 0.8%
• CVE-2023-6185 High 8.3 Improper input validation enabling arbitrary Gstreamer pipeline injection 1.0%
• CVE-2023-0950 High 7.8 Array Index UnderFlow in Calc Formula Parsing 0.3%
• CVE-2023-2255 Unrated Remote documents loaded without prompt via IFrame 2.2%
• CVE-2022-3140 Unrated Macro URL arbitrary script execution 7.0%
• CVE-2022-26305 Unrated Execution of Untrusted Macros Due to Improper Certificate Validation 1.2%
• CVE-2022-26307 Unrated Weak Master Keys 1.5%
• CVE-2022-26306 Unrated Execution of Untrusted Macros Due to Improper Certificate Validation 1.1%
• CVE-2021-25636 Unrated Incorrect trust validation of signature with ambiguous KeyInfo children 1.0%
• CVE-2021-25634 Unrated Timestamp Manipulation with Signature Wrapping 0.7%
• CVE-2021-25633 Unrated Content Manipulation with Double Certificate Attack 0.7%
• CVE-2021-25631 Unrated denylist of executable filename extensions possible to bypass under windows 5.0%
• CVE-2020-12803 Unrated XForms submissions could overwrite local files 1.8%
• CVE-2020-12802 Unrated remote graphics contained in docx format retrieved in 'stealth mode' 2.0%
• CVE-2020-12801 Unrated Crash-recovered MSOffice encrypted documents defaulted to not to using encryption on next save 1.3%