The Document Foundation vulnerabilities
We track 14 vulnerabilities in The Document Foundation products. 14 are rated high or critical, and none are known to be exploited. The most recent was published on October 5, 2026.
Latest The Document Foundation vulnerabilities
- 8.5 High severity
LibreOffice: Inclusion of Functionality from Untrusted Control Sphere
LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A document could name a Java database driver for such a link to be loaded from a remote location, so opening the document could run Java code from that lo
- 7.8 High severity
LibreOffice: Off-by-one Error
LibreOffice Calc compiles cell formulas when opening a spreadsheet. A heap buffer overflow existed when compiling a very long formula made up of many opening tokens. The array that tracks nesting depth was allocated one element too small for that worst case, s
- 7.3 High severity
LibreOffice: Use After Free
A heap use-after-free existed when importing the blank-width characters of an ODF number format. A position value read from the document was not checked against the length of the format-code string, so a malformed number format could be processed against memor
- 7.8 High severity
LibreOffice: Out-of-bounds Write
Out-of-bounds write vulnerability in The Document Foundation LibreOffice via crafted OOXML documents with mismatched encryption salt parameters. This issue affects LibreOffice: from 26.2 before 26.2.3, from 25.8 before 25.8.7.
- 7.8 High severity
LibreOffice supports Office URI Schemes to enable browser integration of LibreOffice with MS…
LibreOffice supports Office URI Schemes to enable browser integration of LibreOffice with MS SharePoint server. An additional scheme 'vnd.libreoffice.command' specific to LibreOffice was added. In the affected versions of LibreOffice a link in a browser using
- 7.8 High severity
Improper Input Validation vulnerability in The Document Foundation LibreOffice allows Windows…
Improper Input Validation vulnerability in The Document Foundation LibreOffice allows Windows Executable hyperlink targets to be executed unconditionally on activation.This issue affects LibreOffice: from 24.8 before < 24.8.5.
- 7.8 High severity
LibreOffice: Improper Verification of Cryptographic Signature
Improper Digital Signature Invalidation vulnerability in Zip Repair Mode of The Document Foundation LibreOffice allows Signature forgery vulnerability in LibreOfficeThis issue affects LibreOffice: from 24.2 before < 24.2.5.
- 7.8 High severity
LibreOffice: Improper Certificate Validation
Certificate Validation user interface in LibreOffice allows potential vulnerability. Signed macros are scripts that have been digitally signed by the developer using a cryptographic signature. When a document with a signed macro is opened a warning is displaye
- 9.8 Critical severity
LibreOffice: Improper Certificate Validation
Improper Certificate Validation vulnerability in LibreOffice "LibreOfficeKit" mode disables TLS certification verification LibreOfficeKit can be used for accessing LibreOffice functionality through C/C++. Typically this is used by third party components to reu
- 8.8 High severity
LibreOffice: Improper Preservation of Permissions
Insufficient macro permission validation of The Document Foundation LibreOffice allows an attacker to execute built-in macros without warning. In affected versions LibreOffice supports hyperlinks with macro or similar built-in command targets that can be execu
- 7.8 High severity
LibreOffice: Improper Validation of Array Index
Improper Validation of Array Index vulnerability in the spreadsheet component of The Document Foundation LibreOffice allows an attacker to craft a spreadsheet document that will cause an array index underflow when loaded. In the affected versions of LibreOffic
- 8.8 High severity
LibreOffice: Inadequate Encryption Strength
LibreOffice supports the storage of passwords for web connections in the user’s configuration database. The stored passwords are encrypted with a single master key provided by the user. A flaw in LibreOffice existed where master key was poorly encoded resultin
- 7.5 High severity
LibreOffice: Use of Insufficiently Random Values
LibreOffice supports the storage of passwords for web connections in the user’s configuration database. The stored passwords are encrypted with a single master key provided by the user. A flaw in LibreOffice existed where the required initialization vector for
- 7.5 High severity
LibreOffice: Improper Certificate Validation
An Improper Certificate Validation vulnerability in LibreOffice existed where determining if a macro was signed by a trusted author was done by only matching the serial number and issuer string of the used certificate with that of a trusted certificate. This i