Product by Open Source
Libreoffice
22 known vulnerabilities in Libreoffice (Open Source), 0 of them actively exploited (CISA KEV).
Key figures
22
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-63277 | RCE via calcext:data-mappings, sql provider and jdbc connector | — | |
| High | CVE-2026-4430 | Heap Buffer Overflow in AgileEngine | 7.8 | |
| High | CVE-2025-1080 | Macro URL arbitrary script execution | 7.8 | |
| Medium | CVE-2026-63266 | Arbitrary file write via calcext:data-mappings, sql provider and Firebird backup functionality | — | |
| Medium | CVE-2026-63268 | LFI via calcext:data-mappings, sql provider and sdbc:flat:file:// db href | — | |
| Medium | CVE-2026-63270 | Environment/ini-file leaks | — | |
| Medium | CVE-2026-63267 | LFI and GET SSRF via calcext:data-mappings and csv provider | — | |
| Medium | CVE-2026-63269 | LFI and GET SSRF via GStreamer and HLS playlists | — | |
| Medium | CVE-2026-63278 | Package URLs can be used to exfiltrate arbitrary INI file values and environment variables | — | |
| High | CVE-2026-8357 | Heap buffer overflow in Calc formula compilation | 7.8 | |
| High | CVE-2026-6040 | Heap use-after-free in ODF number-format blank-width parsing | 7.3 | |
| Medium | CVE-2026-63272 | Heap buffer overflow in WMF text record import | — | |
| Medium | CVE-2026-63274 | Heap buffer overflow in PDF import stream handling | — | |
| Medium | CVE-2026-63276 | Stack buffer overflow in CFF to Type 1 font conversion | — | |
| Medium | CVE-2026-63275 | Stack buffer overflow in CFF font hint handling | — | |
| Medium | CVE-2026-63279 | Out of bounds read in PICT image import | — | |
| Medium | CVE-2026-63273 | Heap buffer overflow in PDF import encryption handling | — | |
| Medium | CVE-2026-8358 | Heap buffer overflow in spreadsheet tracked-changes import | — | |
| Medium | CVE-2026-6045 | Heap buffer overflow in EMF+ gradient brush import | — | |
| Medium | CVE-2026-6039 | Heap buffer overflow in DXF polyline import | — | |
| Medium | CVE-2026-8356 | Stack buffer overflow in PPT presentation import | — | |
| Medium | CVE-2026-6047 | Heap buffer overflow in OOXML text box element import | — |