Document Foundation LibreOffice

13 known vulnerabilities in Document Foundation LibreOffice, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-63277 CVSS 8.5 high LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A document could name a Java…
  • CVE-2026-63270 CVSS 6.7 medium URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information could be…
  • CVE-2026-63269 CVSS 6.7 medium LibreOffice can link to audio and video files from a document, and on Linux it plays them with GStreamer. A linked media file could be an…
  • CVE-2026-63268 CVSS 6.7 medium LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A link of the sql type could…
  • CVE-2026-63267 CVSS 6.7 medium LibreOffice Calc can link a cell range to an external csv data source, and the link is saved in the document. Such a link was fetched…
  • CVE-2026-63266 CVSS 6.8 medium LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. Through such a link a document…
  • CVE-2026-63279 CVSS 5.4 medium LibreOffice can import PICT images, which may be embedded in documents. An out of bounds read existed when importing an image that uses a…
  • CVE-2026-63278 CVSS 6.7 medium URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information could be…
  • CVE-2026-63276 CVSS 5.4 medium LibreOffice converts CFF fonts to Type 1 when it subsets a font, which happens when a document is exported to PDF, and CFF fonts may be…
  • CVE-2026-63275 CVSS 5.4 medium LibreOffice can read CFF fonts, which may be embedded in documents. A stack buffer overflow existed when reading the hints of a glyph. The…
  • CVE-2026-63274 CVSS 5.4 medium LibreOffice Draw can import PDF documents. A heap buffer overflow existed when importing a stream object. The length of the stream was…
  • CVE-2026-63273 CVSS 5.4 medium LibreOffice Draw can import PDF documents. A heap buffer overflow existed when importing an encrypted document. The length of the…
  • CVE-2026-63272 CVSS 5.4 medium LibreOffice can import WMF graphics, which may be embedded in documents. A heap buffer overflow existed when importing a text record that…