LibreOffice Security Advisory: Summary of Multiple CVEs including RCE, Macro Execution, and Path Traversal

Vulnerability Overview The webpage lists multiple security vulnerabilities related to LibreOffice, each with a corresponding CVE identifier and description. These vulnerabilities involve various security issues, including but not limited to heap buffer overflows, path traversal, macro execution, certificate verification, and script execution. Affected Versions LibreOffice 26.2.3/25.8.7: Heap buffer overflow (CVE-2025-4430) LibreOffice 25.2.4/25.8.0: TCC bypass (CVE-2025-14714) LibreOffice 24.8.6/25.2.2: PDF signature forgery (CVE-2025-2866) LibreOffice 24.8.5/25.2.1: Arbitrary script execution via macro URLs (CVE-2025-1080) LibreOffice 24.8.5: Unconditional execution of executable hyperlinks targeting Windows paths (CVE-2025-0514) LibreOffice 24.8.4: Path traversal leading to arbitrary file writes (CVE-2024-12425); URL fetching allows extraction of arbitrary INI file values and environment variables (CVE-2024-12426) LibreOffice 24.8.0/24.2.5: Signatures should not be trusted in "repair mode" (CVE-2024-7788) LibreOffice 24.2.5: Unverified macro signatures are trusted in high-security mode (CVE-2024-6472) LibreOffice 24.2.4: TLS certificates not correctly verified (CVE-2024-5261) LibreOffice 7.6.7/24.2.3: Graphic click bindings allow unchecked script execution (CVE-2024-3044) LibreOffice 7.6.4/7.5.9: Link targets allow arbitrary script execution (CVE-2023-6186) LibreOffice 7.6.3/7.5.9: Improper input validation leads to GStreamer pipeline injection (CVE-2023-6185) LibreOffice 7.4.7/7.5.3: Silent remote document loading (CVE-2023-2255) LibreOffice 7.4.6/7.5.1: Array index underflow (CVE-2023-0950) LibreOffice 7.3.6/7.4.1: Arbitrary script execution via macro URLs (CVE-2022-3140) LibreOffice 7.2.7/7.3.3: Static initialization vectors allow password recovery (CVE-2022-26306); weak master keys (CVE-2022-26307) LibreOffice 7.2.7/7.3.2: Execution of untrusted macros (CVE-2022-26305) LibreOffice 7.2.6/7.3.1: Risk of empty Java classpath entries (CVE-2022-38745) LibreOffice 7.2.5/7.3.0: Signature trust verification errors (CVE-2021-25636) LibreOffice 7.0.6/7.1.3: extension added to macOS executable whitelist (CVE-2021-25632) LibreOffice 7.0.6/7.1.2: Content manipulation with dual certificate attacks (CVE-2021-25633); timestamp manipulation and signature wrapping (CVE-2021-25634) LibreOffice 7.0.5/7.1.2: Executable filename extension bypass (CVE-2021-25631) LibreOffice 7.0.5/7.1.1: Content manipulation and certificate verification attacks (CVE-2021-25635) LibreOffice 6.4.4: Remote graphic inclusion in DOCX format (CVE-2020-12802); XForms submission overwrites local files (CVE-2020-12803) LibreOffice 6.3.6/6.4.3: Crash recovery MS Office encrypted documents are unencrypted by default (CVE-2020-12801) LibreOffice 6.2.7/6.3.1: Insecure URL assembly (CVE-2019-9854); Windows 8.3 path equivalence handling (CVE-2019-9855) LibreOffice 6.2.6/6.3.1: Improper URL decoding (CVE-2019-9853) LibreOffice 6.2.6/6.3.0: Improper URL validation (CVE-2019-9850); LibreLogo global event script execution (CVE-2019-9851); Improper URL encoding (CVE-2019-9852) LibreOffice 6.2.5: LibreLogo arbitrary script execution (CVE-2019-9848); Remote bullet graph retrieval (CVE-2019-9849) LibreOffice 6.1.6/6.2.3: Unconditional execution of executable hyperlink targets (CVE-2019-9847) LibreOffice 6.0.7/6.1.3: Directory traversal (CVE-2018-16858) LibreOffice 5.4.7/6.0.4: Information leakage via SMB links (CVE-2018-10583) LibreOffice 5.4.6/6.0.2: Heap buffer overflow (CVE-2018-10120) LibreOffice 5.4.5/6.0.1: Remote arbitrary file disclosure (CVE-2018-1055); Use After Free (CVE-2018-10119) LibreOffice 5.2.5/5.3.0: Heap buffer overflow (CVE-2017-7870, CVE-2016-10327) LibreOffice 5.1.6/5.2.2/5.3.0: Arbitrary file disclosure (CVE-2017-3157) LibreOffice 5.1.4/5.2.0: Invalid STL iterator dereference (CVE-2016-4324) LibreOffice 5.0.5/5.1.0: LotusWordPro boundary overflow (CVE-2016-0795) LibreOffice 5.0.4/5.1.0: LotusWordPro multiple boundary overflows (CVE-2016-0794) LibreOffice 5.0.2/5.1.0: Out-of-bounds write (CVE-2017-12607, CVE-2017-12608) LibreOffice 4.4.6/5.0.1: Bookmark state memory corruption (CVE-2015-5214) LibreOffice 4.4.5/5.0.0: Arbitrary file disclosure (CVE-2015-4551); ODF integer underflow (CVE-2015-5212); DOC printable integer overflow (CVE-2015-5213) LibreOffice 4.3.7/4.4.2: Out-of-bounds write (CVE-2015-1774) LibreOffice 4.2.7/4.3.3: Use After Free (CVE-2014-3693) LibreOffice 4.2.6-secfix/4.3.1: CSV command injection (CVE-2014-3524); Arbitrary file disclosure (CVE-2014-3575) LibreOffice 4.2.5: Microsoft Office VBA macro execution (CVE-2014-0247) LibreOffice 3.6.7: Microsoft .docx denial of service (CVE-2013-4156) LibreOffice 3.5.7: Multiple format files denial of service (CVE-2012-4233) LibreOffice 3.5.5: Multiple heap buffer overflows (CVE-2012-2665) LibreOffice 3.5.3: Integer overflow (CVE-2012-1149, CVE-2012-2334) LibreOffice 3.4.6/3.5.1: XML entity expansion (CVE-2012-0037) LibreOffice 3.4.3: Multiple vulnerabilities (CVE-2011-2713, CVE-2013-2

Goal Reached Thanks to every supporter — we hit 100%!

LibreOffice Security Advisory: Summary of Multiple CVEs including RCE, Macro Execution, and Path Traversal