# The Document Foundation LibreOffice.

Every CVE that names The Document Foundation LibreOffice among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Heap buffer overflow in dBASE index import](https://agentprime.io/advisories/CVE-2026-76181.md)
  `CVE-2026-76181` · CVE record: The Document Foundation LibreOffice · CVSS 5.4 Medium · Not analysed yet · Published 5 Nov 2026 · Tags: Denial of service, Memory corruption
- [Environment/ini-file leaks](https://agentprime.io/advisories/CVE-2026-63270.md)
  `CVE-2026-63270` · CVE record: The Document Foundation LibreOffice · CVSS 6.7 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Information disclosure
- [LFI and GET SSRF via GStreamer and HLS playlists](https://agentprime.io/advisories/CVE-2026-63269.md)
  `CVE-2026-63269` · CVE record: The Document Foundation LibreOffice · CVSS 6.7 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Information disclosure, Server-side request forgery (SSRF)
- [LFI via calcext:data-mappings, sql provider and sdbc:flat:file:// db href](https://agentprime.io/advisories/CVE-2026-63268.md)
  `CVE-2026-63268` · CVE record: The Document Foundation LibreOffice · CVSS 6.7 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Information disclosure
- [LFI and GET SSRF via calcext:data-mappings and csv provider](https://agentprime.io/advisories/CVE-2026-63267.md)
  `CVE-2026-63267` · CVE record: The Document Foundation LibreOffice · CVSS 6.7 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Information disclosure, Server-side request forgery (SSRF)
- [Arbitrary file write via calcext:data-mappings, sql provider and Firebird backup functionality](https://agentprime.io/advisories/CVE-2026-63266.md)
  `CVE-2026-63266` · CVE record: The Document Foundation LibreOffice · CVSS 6.8 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Path traversal
- [RCE via calcext:data-mappings, sql provider and jdbc connector](https://agentprime.io/advisories/CVE-2026-63277.md)
  `CVE-2026-63277` · CVE record: The Document Foundation LibreOffice · CVSS 8.5 High · Not analysed yet · Published 5 Oct 2026 · Tags: CWE-829
- [Out of bounds read in PICT image import](https://agentprime.io/advisories/CVE-2026-63279.md)
  `CVE-2026-63279` · CVE record: The Document Foundation LibreOffice · CVSS 5.4 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: Memory corruption
- [Package URLs can be used to exfiltrate arbitrary INI file values and environment variables](https://agentprime.io/advisories/CVE-2026-63278.md)
  `CVE-2026-63278` · CVE record: The Document Foundation LibreOffice · CVSS 6.7 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: Information disclosure
- [Stack buffer overflow in CFF to Type 1 font conversion](https://agentprime.io/advisories/CVE-2026-63276.md)
  `CVE-2026-63276` · CVE record: The Document Foundation LibreOffice · CVSS 5.4 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: Memory corruption
- [Stack buffer overflow in CFF font hint handling](https://agentprime.io/advisories/CVE-2026-63275.md)
  `CVE-2026-63275` · CVE record: The Document Foundation LibreOffice · CVSS 5.4 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: Memory corruption
- [Heap buffer overflow in PDF import stream handling](https://agentprime.io/advisories/CVE-2026-63274.md)
  `CVE-2026-63274` · CVE record: The Document Foundation LibreOffice · CVSS 5.4 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: Memory corruption
- [Heap buffer overflow in PDF import encryption handling](https://agentprime.io/advisories/CVE-2026-63273.md)
  `CVE-2026-63273` · CVE record: The Document Foundation LibreOffice · CVSS 5.4 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: Memory corruption
- [Heap buffer overflow in WMF text record import](https://agentprime.io/advisories/CVE-2026-63272.md)
  `CVE-2026-63272` · CVE record: The Document Foundation LibreOffice · CVSS 5.4 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: Memory corruption
- [Heap buffer overflow in spreadsheet tracked-changes import](https://agentprime.io/advisories/CVE-2026-8358.md)
  `CVE-2026-8358` · CVE record: The Document Foundation LibreOffice · CVSS 5.4 Medium · Not analysed yet · Published 15 Jun 2026 · Tags: Memory corruption
- [Heap buffer overflow in Calc formula compilation](https://agentprime.io/advisories/CVE-2026-8357.md)
  `CVE-2026-8357` · CVE record: The Document Foundation LibreOffice · CVSS 5.4 Medium · Not analysed yet · Published 15 Jun 2026 · Tags: Memory corruption, CWE-193
- [Stack buffer overflow in PPT presentation import](https://agentprime.io/advisories/CVE-2026-8356.md)
  `CVE-2026-8356` · CVE record: The Document Foundation LibreOffice · CVSS 5.4 Medium · Not analysed yet · Published 15 Jun 2026 · Tags: Memory corruption
- [Heap buffer overflow in OOXML text box element import](https://agentprime.io/advisories/CVE-2026-6047.md)
  `CVE-2026-6047` · CVE record: The Document Foundation LibreOffice · CVSS 5.4 Medium · Not analysed yet · Published 15 Jun 2026 · Tags: Memory corruption
- [Heap buffer overflow in EMF+ gradient brush import](https://agentprime.io/advisories/CVE-2026-6045.md)
  `CVE-2026-6045` · CVE record: The Document Foundation LibreOffice · CVSS 5.4 Medium · Not analysed yet · Published 15 Jun 2026 · Tags: Memory corruption
- [Heap use-after-free in ODF number-format blank-width parsing](https://agentprime.io/advisories/CVE-2026-6040.md)
  `CVE-2026-6040` · CVE record: The Document Foundation LibreOffice · CVSS 5.4 Medium · Not analysed yet · Published 15 Jun 2026 · Tags: Memory corruption
- [Heap buffer overflow in DXF polyline import](https://agentprime.io/advisories/CVE-2026-6039.md)
  `CVE-2026-6039` · CVE record: The Document Foundation LibreOffice · CVSS 5.4 Medium · Not analysed yet · Published 15 Jun 2026 · Tags: Memory corruption, CWE-197
- [Heap Buffer Overflow in AgileEngine](https://agentprime.io/advisories/CVE-2026-4430.md)
  `CVE-2026-4430` · CVE record: The Document Foundation LibreOffice · CVSS 5.4 Medium · Not analysed yet · Published 7 May 2026 · Tags: Memory corruption
- [TCC Bypass via Inherited Permissions in Bundled Interpreter](https://agentprime.io/advisories/CVE-2025-14714.md)
  `CVE-2025-14714` · CVE record: The Document Foundation LibreOffice · CVSS 0.9 Low · Not analysed yet · Published 15 Dec 2025 · Tags: Authentication bypass
- [PDF signature forgery with adbe.pkcs7.sha1 SubFilter](https://agentprime.io/advisories/CVE-2025-2866.md)
  `CVE-2025-2866` · CVE record: The Document Foundation LibreOffice · CVSS 2.4 Low · Not analysed yet · Published 27 Apr 2025 · Tags: Weak cryptography or TLS
- [Content Manipulation with Certificate Validation Attack](https://agentprime.io/advisories/CVE-2021-25635.md)
  `CVE-2021-25635` · CVE record: The Document Foundation LibreOffice · CVSS 5.2 Medium · Not analysed yet · Published 21 Mar 2025 · Tags: Weak cryptography or TLS
- [Macro URL arbitrary script execution](https://agentprime.io/advisories/CVE-2025-1080.md)
  `CVE-2025-1080` · CVE record: The Document Foundation LibreOffice · CVSS 7.2 High · Not analysed yet · Published 4 Mar 2025 · Tags: CWE-20
- [Executable hyperlink Windows path targets executed unconditionally on activation](https://agentprime.io/advisories/CVE-2025-0514.md)
  `CVE-2025-0514` · CVE record: The Document Foundation LibreOffice · CVSS 7.2 High · Not analysed yet · Published 25 Feb 2025 · Tags: CWE-20
- [URL fetching can be used to exfiltrate arbitrary INI file values and environment variables](https://agentprime.io/advisories/CVE-2024-12426.md)
  `CVE-2024-12426` · CVE record: The Document Foundation LibreOffice · CVSS 6.7 Medium · Not analysed yet · Published 7 Jan 2025 · Tags: Information disclosure
- [Path traversal leading to arbitrary .ttf file write](https://agentprime.io/advisories/CVE-2024-12425.md)
  `CVE-2024-12425` · CVE record: The Document Foundation LibreOffice · CVSS 2.4 Low · Not analysed yet · Published 7 Jan 2025 · Tags: Path traversal
- [Signatures in "repair mode" should not be trusted](https://agentprime.io/advisories/CVE-2024-7788.md)
  `CVE-2024-7788` · CVE record: The Document Foundation LibreOffice · CVSS 7.8 High · Not analysed yet · Published 17 Sept 2024 · Tags: Weak cryptography or TLS
- [Ability to trust not validated macro signatures removed in high security mode](https://agentprime.io/advisories/CVE-2024-6472.md)
  `CVE-2024-6472` · CVE record: The Document Foundation LibreOffice · CVSS 7.8 High · Not analysed yet · Published 5 Aug 2024 · Tags: Weak cryptography or TLS
- [TLS certificate are not properly verified when utilizing LibreOfficeKit](https://agentprime.io/advisories/CVE-2024-5261.md)
  `CVE-2024-5261` · CVE record: The Document Foundation LibreOffice · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Jun 2024 · Tags: Weak cryptography or TLS
- [Graphic on-click binding allows unchecked script execution](https://agentprime.io/advisories/CVE-2024-3044.md)
  `CVE-2024-3044` · CVE record: The Document Foundation LibreOffice · CVSS 6.5 Medium · Not analysed yet · Published 14 May 2024 · Tags: Code injection, CWE-356
- [Link targets allow arbitrary script execution](https://agentprime.io/advisories/CVE-2023-6186.md)
  `CVE-2023-6186` · CVE record: The Document Foundation LibreOffice · CVSS 8.3 High · Not analysed yet · Published 11 Dec 2023
- [Improper input validation enabling arbitrary Gstreamer pipeline injection](https://agentprime.io/advisories/CVE-2023-6185.md)
  `CVE-2023-6185` · CVE record: The Document Foundation LibreOffice · CVSS 8.3 High · Not analysed yet · Published 11 Dec 2023
- [Remote documents loaded without prompt via IFrame](https://agentprime.io/advisories/CVE-2023-2255.md)
  `CVE-2023-2255` · CVE record: The Document Foundation LibreOffice · No CVSS score · Not analysed yet · Published 25 May 2023 · Tags: CWE-264
- [Array Index UnderFlow in Calc Formula Parsing](https://agentprime.io/advisories/CVE-2023-0950.md)
  `CVE-2023-0950` · CVE record: The Document Foundation LibreOffice · CVSS 7.8 High · Not analysed yet · Published 25 May 2023 · Tags: CWE-129
- [Macro URL arbitrary script execution](https://agentprime.io/advisories/CVE-2022-3140.md)
  `CVE-2022-3140` · CVE record: The Document Foundation LibreOffice · No CVSS score · Not analysed yet · Published 11 Oct 2022 · Tags: CWE-20
- [Weak Master Keys](https://agentprime.io/advisories/CVE-2022-26307.md)
  `CVE-2022-26307` · CVE record: The Document Foundation LibreOffice · No CVSS score · Not analysed yet · Published 25 Jul 2022 · Tags: Weak cryptography or TLS
- [Execution of Untrusted Macros Due to Improper Certificate Validation](https://agentprime.io/advisories/CVE-2022-26306.md)
  `CVE-2022-26306` · CVE record: The Document Foundation LibreOffice · No CVSS score · Not analysed yet · Published 25 Jul 2022 · Tags: Weak cryptography or TLS
- [Execution of Untrusted Macros Due to Improper Certificate Validation](https://agentprime.io/advisories/CVE-2022-26305.md)
  `CVE-2022-26305` · CVE record: The Document Foundation LibreOffice · No CVSS score · Not analysed yet · Published 25 Jul 2022 · Tags: Weak cryptography or TLS
- [Incorrect trust validation of signature with ambiguous KeyInfo children](https://agentprime.io/advisories/CVE-2021-25636.md)
  `CVE-2021-25636` · CVE record: The Document Foundation LibreOffice · No CVSS score · Not analysed yet · Published 22 Feb 2022 · Tags: Weak cryptography or TLS
- [Timestamp Manipulation with Signature Wrapping](https://agentprime.io/advisories/CVE-2021-25634.md)
  `CVE-2021-25634` · CVE record: The Document Foundation LibreOffice · No CVSS score · Not analysed yet · Published 12 Oct 2021 · Tags: Weak cryptography or TLS
- [Content Manipulation with Double Certificate Attack](https://agentprime.io/advisories/CVE-2021-25633.md)
  `CVE-2021-25633` · CVE record: The Document Foundation LibreOffice · No CVSS score · Not analysed yet · Published 11 Oct 2021 · Tags: Weak cryptography or TLS
- [denylist of executable filename extensions possible to bypass under windows](https://agentprime.io/advisories/CVE-2021-25631.md)
  `CVE-2021-25631` · CVE record: The Document Foundation LibreOffice · No CVSS score · Not analysed yet · Published 3 May 2021 · Tags: CWE-184
- [XForms submissions could overwrite local files](https://agentprime.io/advisories/CVE-2020-12803.md)
  `CVE-2020-12803` · CVE record: The Document Foundation LibreOffice · No CVSS score · Not analysed yet · Published 8 Jun 2020
- [remote graphics contained in docx format retrieved in 'stealth mode'](https://agentprime.io/advisories/CVE-2020-12802.md)
  `CVE-2020-12802` · CVE record: The Document Foundation LibreOffice · No CVSS score · Not analysed yet · Published 8 Jun 2020 · Tags: Information disclosure
- [Crash-recovered MSOffice encrypted documents defaulted to not to using encryption on next save](https://agentprime.io/advisories/CVE-2020-12801.md)
  `CVE-2020-12801` · CVE record: The Document Foundation LibreOffice · No CVSS score · Not analysed yet · Published 18 May 2020 · Tags: Weak cryptography or TLS

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=the-document-foundation-libreoffice>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/the-document-foundation-libreoffice/>. Everything for agents: <https://agentprime.io/llms.txt>.