Product by Debian
Libreoffice
58 known vulnerabilities in Libreoffice (Debian), 0 of them actively exploited (CISA KEV).
Key figures
58
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
4
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2019-9851 | LibreLogo global-event script execution | 9.8 | |
| Critical | CVE-2019-9848 | Document Foundation LibreOffice: security vulnerability | 9.8 | |
| Critical | CVE-2018-6871 | The Document Foundation LibreOffice: security vulnerability | 9.8 | |
| High | CVE-2018-10583 | Apache OpenOffice: Information Disclosure | 7.5 | |
| Critical | CVE-2019-9850 | Insufficient url validation allowing LibreLogo script execution | 9.8 | |
| Medium | CVE-2012-0037 | Apache OpenOffice: XML External Entity (XXE) | 6.5 | |
| Medium | CVE-2023-1183 | Arbitrary file write | 5.0 | |
| Medium | CVE-2022-3140 | Macro URL arbitrary script execution | 6.3 | |
| Medium | CVE-2012-5639 | Apache OpenOffice: security vulnerability | 6.5 | |
| High | CVE-2016-4324 | The Document Foundation LibreOffice: Use-After-Free | 7.8 | |
| High | CVE-2018-10120 | The Document Foundation LibreOffice: Heap-Based Buffer Overflow | 7.8 | |
| High | CVE-2018-10119 | The Document Foundation LibreOffice: Use-After-Free | 7.8 | |
| High | CVE-2022-26307 | Weak Master Keys | 8.8 | |
| High | CVE-2019-9854 | Unsafe URL assembly flaw in allowed script location check | 7.8 | |
| High | CVE-2019-9852 | Insufficient URL encoding flaw in allowed script location check | 7.8 | |
| Medium | CVE-2023-2255 | Remote documents loaded without prompt via IFrame | 5.3 | |
| Medium | CVE-2019-9849 | Document Foundation LibreOffice: security vulnerability | 4.3 | |
| High | CVE-2026-63277 | RCE via calcext:data-mappings, sql provider and jdbc connector | — | |
| High | CVE-2023-6185 | Improper input validation enabling arbitrary Gstreamer pipeline injection | 8.3 | |
| Not rated | CVE-2012-1149 | Apache Openoffice.org: Heap-Based Buffer Overflow | — | |
| Not rated | CVE-2015-4551 | Apache OpenOffice: Information Disclosure | — | |
| High | CVE-2022-26306 | Execution of Untrusted Macros Due to Improper Certificate Validation | 7.5 | |
| Not rated | CVE-2015-5213 | Apache OpenOffice: Buffer Overflow | — | |
| Not rated | CVE-2015-5214 | Apache OpenOffice: Memory Corruption | — | |
| Not rated | CVE-2015-5212 | Apache OpenOffice: Integer Underflow | — |