agentprime: the-document-foundation-libreofficeEvery new CVE for the-document-foundation-libreoffice.https://agentprime.io/CVE-2026-76181: Heap buffer overflow in dBASE index importhttps://agentprime.io/advisories/CVE-2026-76181/https://agentprime.io/advisories/CVE-2026-76181/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 19:57:48 GMTCVECVE-2026-63270: Environment/ini-file leakshttps://agentprime.io/advisories/CVE-2026-63270/https://agentprime.io/advisories/CVE-2026-63270/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Oct 2026 11:17:24 GMTCVECVE-2026-63269: LFI and GET SSRF via GStreamer and HLS playlistshttps://agentprime.io/advisories/CVE-2026-63269/https://agentprime.io/advisories/CVE-2026-63269/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Oct 2026 11:17:23 GMTCVECVE-2026-63268: LFI via calcext:data-mappings, sql provider and sdbc:flat:file:// db hrefhttps://agentprime.io/advisories/CVE-2026-63268/https://agentprime.io/advisories/CVE-2026-63268/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Oct 2026 11:17:22 GMTCVECVE-2026-63267: LFI and GET SSRF via calcext:data-mappings and csv providerhttps://agentprime.io/advisories/CVE-2026-63267/https://agentprime.io/advisories/CVE-2026-63267/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Oct 2026 11:17:22 GMTCVECVE-2026-63266: Arbitrary file write via calcext:data-mappings, sql provider and Firebird backup functionalityhttps://agentprime.io/advisories/CVE-2026-63266/https://agentprime.io/advisories/CVE-2026-63266/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Oct 2026 11:17:21 GMTCVECVE-2026-63277: RCE via calcext:data-mappings, sql provider and jdbc connectorhttps://agentprime.io/advisories/CVE-2026-63277/https://agentprime.io/advisories/CVE-2026-63277/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Oct 2026 11:17:20 GMTCVECVE-2026-63279: Out of bounds read in PICT image importhttps://agentprime.io/advisories/CVE-2026-63279/https://agentprime.io/advisories/CVE-2026-63279/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Sep 2026 11:10:41 GMTCVECVE-2026-63278: Package URLs can be used to exfiltrate arbitrary INI file values and environment variableshttps://agentprime.io/advisories/CVE-2026-63278/https://agentprime.io/advisories/CVE-2026-63278/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Sep 2026 11:10:36 GMTCVECVE-2026-63276: Stack buffer overflow in CFF to Type 1 font conversionhttps://agentprime.io/advisories/CVE-2026-63276/https://agentprime.io/advisories/CVE-2026-63276/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Sep 2026 11:10:32 GMTCVECVE-2026-63275: Stack buffer overflow in CFF font hint handlinghttps://agentprime.io/advisories/CVE-2026-63275/https://agentprime.io/advisories/CVE-2026-63275/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Sep 2026 11:10:26 GMTCVECVE-2026-63274: Heap buffer overflow in PDF import stream handlinghttps://agentprime.io/advisories/CVE-2026-63274/https://agentprime.io/advisories/CVE-2026-63274/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Sep 2026 11:10:19 GMTCVECVE-2026-63273: Heap buffer overflow in PDF import encryption handlinghttps://agentprime.io/advisories/CVE-2026-63273/https://agentprime.io/advisories/CVE-2026-63273/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Sep 2026 11:10:13 GMTCVECVE-2026-63272: Heap buffer overflow in WMF text record importhttps://agentprime.io/advisories/CVE-2026-63272/https://agentprime.io/advisories/CVE-2026-63272/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Sep 2026 11:10:03 GMTCVECVE-2026-8358: Heap buffer overflow in spreadsheet tracked-changes importhttps://agentprime.io/advisories/CVE-2026-8358/https://agentprime.io/advisories/CVE-2026-8358/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 15 Jun 2026 16:24:03 GMTCVECVE-2026-8357: Heap buffer overflow in Calc formula compilationhttps://agentprime.io/advisories/CVE-2026-8357/https://agentprime.io/advisories/CVE-2026-8357/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 15 Jun 2026 16:23:37 GMTCVECVE-2026-8356: Stack buffer overflow in PPT presentation importhttps://agentprime.io/advisories/CVE-2026-8356/https://agentprime.io/advisories/CVE-2026-8356/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 15 Jun 2026 16:23:06 GMTCVECVE-2026-6047: Heap buffer overflow in OOXML text box element importhttps://agentprime.io/advisories/CVE-2026-6047/https://agentprime.io/advisories/CVE-2026-6047/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 15 Jun 2026 16:22:37 GMTCVECVE-2026-6045: Heap buffer overflow in EMF+ gradient brush importhttps://agentprime.io/advisories/CVE-2026-6045/https://agentprime.io/advisories/CVE-2026-6045/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 15 Jun 2026 16:22:16 GMTCVECVE-2026-6040: Heap use-after-free in ODF number-format blank-width parsinghttps://agentprime.io/advisories/CVE-2026-6040/https://agentprime.io/advisories/CVE-2026-6040/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 15 Jun 2026 16:21:53 GMTCVECVE-2026-6039: Heap buffer overflow in DXF polyline importhttps://agentprime.io/advisories/CVE-2026-6039/https://agentprime.io/advisories/CVE-2026-6039/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 15 Jun 2026 16:21:16 GMTCVECVE-2026-4430: Heap Buffer Overflow in AgileEnginehttps://agentprime.io/advisories/CVE-2026-4430/https://agentprime.io/advisories/CVE-2026-4430/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 07 May 2026 07:16:18 GMTCVECVE-2025-14714: TCC Bypass via Inherited Permissions in Bundled Interpreterhttps://agentprime.io/advisories/CVE-2025-14714/https://agentprime.io/advisories/CVE-2025-14714/CVSS 0.9 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 15 Dec 2025 10:30:55 GMTCVECVE-2025-2866: PDF signature forgery with adbe.pkcs7.sha1 SubFilterhttps://agentprime.io/advisories/CVE-2025-2866/https://agentprime.io/advisories/CVE-2025-2866/CVSS 2.4 (Low). Published by the CVE Program. Not analysed by agentprime yet.Sun, 27 Apr 2025 19:04:52 GMTCVECVE-2021-25635: Content Manipulation with Certificate Validation Attackhttps://agentprime.io/advisories/CVE-2021-25635/https://agentprime.io/advisories/CVE-2021-25635/CVSS 5.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Mar 2025 14:52:50 GMTCVECVE-2025-1080: Macro URL arbitrary script executionhttps://agentprime.io/advisories/CVE-2025-1080/https://agentprime.io/advisories/CVE-2025-1080/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 04 Mar 2025 20:04:10 GMTCVECVE-2025-0514: Executable hyperlink Windows path targets executed unconditionally on activationhttps://agentprime.io/advisories/CVE-2025-0514/https://agentprime.io/advisories/CVE-2025-0514/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Feb 2025 21:16:30 GMTCVECVE-2024-12426: URL fetching can be used to exfiltrate arbitrary INI file values and environment variableshttps://agentprime.io/advisories/CVE-2024-12426/https://agentprime.io/advisories/CVE-2024-12426/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Jan 2025 12:22:32 GMTCVECVE-2024-12425: Path traversal leading to arbitrary .ttf file writehttps://agentprime.io/advisories/CVE-2024-12425/https://agentprime.io/advisories/CVE-2024-12425/CVSS 2.4 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Jan 2025 11:15:08 GMTCVECVE-2024-7788: Signatures in "repair mode" should not be trustedhttps://agentprime.io/advisories/CVE-2024-7788/https://agentprime.io/advisories/CVE-2024-7788/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 17 Sep 2024 14:28:36 GMTCVECVE-2024-6472: Ability to trust not validated macro signatures removed in high security modehttps://agentprime.io/advisories/CVE-2024-6472/https://agentprime.io/advisories/CVE-2024-6472/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Aug 2024 12:55:39 GMTCVECVE-2024-5261: TLS certificate are not properly verified when utilizing LibreOfficeKithttps://agentprime.io/advisories/CVE-2024-5261/https://agentprime.io/advisories/CVE-2024-5261/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Jun 2024 12:44:24 GMTCVEcriticalCVE-2024-3044: Graphic on-click binding allows unchecked script executionhttps://agentprime.io/advisories/CVE-2024-3044/https://agentprime.io/advisories/CVE-2024-3044/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 May 2024 20:19:51 GMTCVECVE-2023-6186: Link targets allow arbitrary script executionhttps://agentprime.io/advisories/CVE-2023-6186/https://agentprime.io/advisories/CVE-2023-6186/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 11 Dec 2023 11:56:40 GMTCVECVE-2023-6185: Improper input validation enabling arbitrary Gstreamer pipeline injectionhttps://agentprime.io/advisories/CVE-2023-6185/https://agentprime.io/advisories/CVE-2023-6185/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 11 Dec 2023 11:52:06 GMTCVECVE-2023-2255: Remote documents loaded without prompt via IFramehttps://agentprime.io/advisories/CVE-2023-2255/https://agentprime.io/advisories/CVE-2023-2255/Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 May 2023 00:00:00 GMTCVECVE-2023-0950: Array Index UnderFlow in Calc Formula Parsinghttps://agentprime.io/advisories/CVE-2023-0950/https://agentprime.io/advisories/CVE-2023-0950/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 May 2023 00:00:00 GMTCVECVE-2022-3140: Macro URL arbitrary script executionhttps://agentprime.io/advisories/CVE-2022-3140/https://agentprime.io/advisories/CVE-2022-3140/Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Oct 2022 00:00:00 GMTCVECVE-2022-26307: Weak Master Keyshttps://agentprime.io/advisories/CVE-2022-26307/https://agentprime.io/advisories/CVE-2022-26307/Published by the CVE Program. Not analysed by agentprime yet.Mon, 25 Jul 2022 00:00:00 GMTCVECVE-2022-26306: Execution of Untrusted Macros Due to Improper Certificate Validationhttps://agentprime.io/advisories/CVE-2022-26306/https://agentprime.io/advisories/CVE-2022-26306/Published by the CVE Program. Not analysed by agentprime yet.Mon, 25 Jul 2022 00:00:00 GMTCVECVE-2022-26305: Execution of Untrusted Macros Due to Improper Certificate Validationhttps://agentprime.io/advisories/CVE-2022-26305/https://agentprime.io/advisories/CVE-2022-26305/Published by the CVE Program. Not analysed by agentprime yet.Mon, 25 Jul 2022 00:00:00 GMTCVECVE-2021-25636: Incorrect trust validation of signature with ambiguous KeyInfo childrenhttps://agentprime.io/advisories/CVE-2021-25636/https://agentprime.io/advisories/CVE-2021-25636/Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Feb 2022 00:00:00 GMTCVECVE-2021-25634: Timestamp Manipulation with Signature Wrappinghttps://agentprime.io/advisories/CVE-2021-25634/https://agentprime.io/advisories/CVE-2021-25634/Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Oct 2021 13:33:54 GMTCVECVE-2021-25633: Content Manipulation with Double Certificate Attackhttps://agentprime.io/advisories/CVE-2021-25633/https://agentprime.io/advisories/CVE-2021-25633/Published by the CVE Program. Not analysed by agentprime yet.Mon, 11 Oct 2021 16:43:34 GMTCVECVE-2021-25631: denylist of executable filename extensions possible to bypass under windowshttps://agentprime.io/advisories/CVE-2021-25631/https://agentprime.io/advisories/CVE-2021-25631/Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 May 2021 11:10:33 GMTCVECVE-2020-12803: XForms submissions could overwrite local fileshttps://agentprime.io/advisories/CVE-2020-12803/https://agentprime.io/advisories/CVE-2020-12803/Published by the CVE Program. Not analysed by agentprime yet.Mon, 08 Jun 2020 15:43:09 GMTCVECVE-2020-12802: remote graphics contained in docx format retrieved in 'stealth mode'https://agentprime.io/advisories/CVE-2020-12802/https://agentprime.io/advisories/CVE-2020-12802/Published by the CVE Program. Not analysed by agentprime yet.Mon, 08 Jun 2020 15:23:05 GMTCVECVE-2020-12801: Crash-recovered MSOffice encrypted documents defaulted to not to using encryption on next savehttps://agentprime.io/advisories/CVE-2020-12801/https://agentprime.io/advisories/CVE-2020-12801/Published by the CVE Program. Not analysed by agentprime yet.Mon, 18 May 2020 14:20:08 GMTCVE