Libreoffice
This hub aggregates every CVE we track for Libreoffice, a product in the consumer software space. Use it to gauge the current risk picture and drill into individual advisories.
77
CVEs tracked
15
Critical
34
High
0
In CISA KEV
Severity distribution
HIGH34MEDIUM26CRITICAL15LOW2
Monthly trend
0
1
1
0
0
0
2
1
2
1
0
0
0
0
0
0
0
1
0
0
0
0
1
0
2024-072026-06
Latest CVEs
The 15 most recently published vulnerabilities affecting Libreoffice.
- CVE-2026-4430Heap Buffer Overflow in AgileEngine7.8
- CVE-2025-14714TCC Bypass via Inherited Permissions in Bundled Interpreter6.5
- CVE-2025-2866PDF signature forgery with adbe.pkcs7.sha1 SubFilter5.5
- CVE-2021-25635Content Manipulation with Certificate Validation Attack5.5
- CVE-2025-1080Macro URL arbitrary script execution7.8
- CVE-2025-0514Executable hyperlink Windows path targets executed unconditionally on activation7.8
- CVE-2024-12426URL fetching can be used to exfiltrate arbitrary INI file values and environment variables6.5
- CVE-2024-12425Path traversal leading to arbitrary .ttf file write3.3
- CVE-2024-7788Signatures in "repair mode" should not be trusted7.8
- CVE-2024-6472Ability to trust not validated macro signatures removed in high security mode7.8
- CVE-2024-5261TLS certificate are not properly verified when utilizing LibreOfficeKit9.8
- CVE-2024-3044Graphic on-click binding allows unchecked script execution6.5
- CVE-2023-6186Link targets allow arbitrary script execution8.3
- CVE-2023-6185Improper input validation enabling arbitrary Gstreamer pipeline injection8.3
- CVE-2023-1183Arbitrary file write5.0
Product normalization is registry-driven with AI assist and human review. How it works