Skip to content
Noroxi

libreoffice records

71 published records for vendor libreoffice.

Researcher profile

Entered KEV
0 · 0%
Weaponized
3 · 4.2%
Pre-auth RCE
17
With a fix record
91.5%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25
  10. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

71 records
  • CVE-2019-9851
    62This week

    LibreLogo global-event script execution

    CriticalCVSS 9.8WeaponizedEPSS 77%

    libreoffice · libreofficeAug 15, 2019

  • CVE-2018-10583
    60This week

    An information disclosure vulnerability occurs when LibreOffice 6.0.3 and Apache OpenOffice Writer 4.1.5 automatically process and initiate

    HighCVSS 7.5WeaponizedEPSS 78%

    libreoffice · libreofficeMay 1, 2018

  • CVE-2018-16858
    60This week

    It was found that libreoffice before versions 6.0.7 and 6.1.3 was vulnerable to a directory traversal attack which could be used to execute

    CriticalCVSS 9.8WeaponizedEPSS 67%

    libreoffice · libreofficeMar 25, 2019

  • CVE-2019-9848
    48Plan

    LibreOffice has a feature where documents can specify that pre-installed scripts can be executed on various document events such as mouse-ov

    CriticalCVSS 9.8No exploitEPSS 28%

    libreoffice · libreofficeJul 17, 2019

  • CVE-2018-6871
    46Plan

    LibreOffice before 5.4.5 and 6.x before 6.0.1 allows remote attackers to read arbitrary files via =WEBSERVICE calls in a document, which use

    CriticalCVSS 9.8Proof of conceptEPSS 22%

    libreoffice · libreofficeFeb 9, 2018

  • CVE-2023-1183
    41Plan

    Arbitrary file write

    MediumCVSS 5.5No exploitEPSS 64%

    libreoffice · libreofficeJul 10, 2023

  • CVE-2014-3524
    41Plan

    Apache OpenOffice before 4.1.1 allows remote attackers to execute arbitrary commands and possibly have other unspecified impact via a crafte

    CriticalCVSS 9.3No exploitEPSS 14%

    apache · openofficeAug 26, 2014

  • CVE-2014-0247
    41Plan

    LibreOffice 4.2.4 executes unspecified VBA macros automatically, which has unspecified impact and attack vectors, possibly related to doc/do

    CriticalCVSS 10.0No exploitEPSS 3%

    libreoffice · libreofficeJul 3, 2014

  • CVE-2017-7870
    40Plan

    LibreOffice before 2017-01-02 has an out-of-bounds write caused by a heap-based buffer overflow related to the tools::Polygon::Insert functi

    CriticalCVSS 9.8No exploitEPSS 3%

    libreoffice · libreofficeApr 14, 2017

  • CVE-2016-10327
    40Plan

    LibreOffice before 2016-12-22 has an out-of-bounds write caused by a heap-based buffer overflow related to the EnhWMFReader::ReadEnhWMF func

    CriticalCVSS 9.8No exploitEPSS 3%

    libreoffice · libreofficeApr 14, 2017

  • CVE-2017-7856
    40Plan

    LibreOffice before 2017-03-11 has an out-of-bounds write caused by a heap-based buffer overflow in the SVMConverter::ImplConvertFromSVM1 fun

    CriticalCVSS 9.8No exploitEPSS 3%

    libreoffice · libreofficeApr 14, 2017

  • CVE-2019-9850
    40Plan

    Insufficient url validation allowing LibreLogo script execution

    CriticalCVSS 9.8No exploitEPSS 2%

    libreoffice · libreofficeAug 15, 2019

  • CVE-2019-9855
    40Plan

    Windows 8.3 path equivalence handling flaw allows LibreLogo script execution

    CriticalCVSS 9.8No exploitEPSS 2%

    libreoffice · libreofficeSep 6, 2019

  • CVE-2017-7882
    40Plan

    LibreOffice before 2017-03-14 has an out-of-bounds write related to the HWPFile::TagsRead function in hwpfilter/source/hwpfile.cxx.

    CriticalCVSS 9.8No exploitEPSS 2%

    libreoffice · libreofficeApr 15, 2017

  • CVE-2018-14939
    40Plan

    The get_app_path function in desktop/unx/source/start.c in LibreOffice through 6.0.5 mishandles the realpath function in certain environment

    CriticalCVSS 9.8No exploitEPSS 2%

    libreoffice · libreofficeAug 5, 2018

  • CVE-2017-8358
    40Plan

    LibreOffice before 2017-03-17 has an out-of-bounds write caused by a heap-based buffer overflow related to the ReadJPEG function in vcl/sour

    CriticalCVSS 9.8No exploitEPSS 2%

    libreoffice · libreofficeApr 30, 2017

  • CVE-2024-5261
    40Plan

    TLS certificate are not properly verified when utilizing LibreOfficeKit

    CriticalCVSS 10.0No exploitEPSS 0%

    libreoffice · libreofficeJun 25, 2024

  • CVE-2011-2685
    39Monitor

    Stack-based buffer overflow in the Lotus Word Pro import filter in LibreOffice before 3.3.3 allows remote attackers to execute arbitrary cod

    CriticalCVSS 9.3No exploitEPSS 7%

    libreoffice · libreofficeJul 21, 2011

  • CVE-2021-25631
    37Monitor

    denylist of executable filename extensions possible to bypass under windows

    HighCVSS 8.8No exploitEPSS 5%

    libreoffice · libreofficeMay 3, 2021

  • CVE-2022-26307
    35Monitor

    LibreOffice supports the storage of passwords for web connections in the user’s configuration database.

    HighCVSS 8.8No exploitEPSS 1%

    libreoffice · libreofficeJul 25, 2022

  • CVE-2023-6185
    35Monitor

    Improper input validation enabling arbitrary Gstreamer pipeline injection

    HighCVSS 8.8No exploitEPSS 1%

    libreoffice · libreofficeDec 11, 2023

  • CVE-2023-6186
    35Monitor

    Link targets allow arbitrary script execution

    HighCVSS 8.8No exploitEPSS 0%

    libreoffice · libreofficeDec 11, 2023

  • CVE-2012-1149
    34Monitor

    Integer overflow in the vclmi.dll module in OpenOffice.org (OOo) 3.3, 3.4 Beta, and possibly earlier, and LibreOffice before 3.5.3, allows r

    HighCVSS 7.5No exploitEPSS 14%

    libreoffice · libreofficeJun 21, 2012

  • CVE-2012-2665
    32Monitor

    Multiple heap-based buffer overflows in the XML manifest encryption tag parsing functionality in OpenOffice.org and LibreOffice before 3.5.5

    HighCVSS 7.5No exploitEPSS 7%

    libreoffice · libreofficeAug 6, 2012

  • CVE-2014-3693
    32Monitor

    Use-after-free vulnerability in the socket manager of Impress Remote in LibreOffice 4.x before 4.2.7 and 4.3.x before 4.3.3 allows remote at

    HighCVSS 7.5No exploitEPSS 5%

    libreoffice · libreofficeNov 7, 2014