| Bug | jessie | stretch | buster | bullseye | bookworm | trixie | sid | Description |
|---|
| CVE-2024-7788 | vulnerable (no DSA, ignored) | fixed | fixed | fixed | fixed | fixed | fixed | Improper Digital Signature Invalidation vulnerability in Zip Repair Mo ... |
| CVE-2024-6472 | vulnerable (no DSA, ignored) | fixed | fixed | fixed | fixed | fixed | fixed | Certificate Validation user interface in LibreOffice allows potential ... |
| CVE-2024-3044 | vulnerable (no DSA, ignored) | fixed | fixed | fixed | fixed | fixed | fixed | Unchecked script execution in Graphic on-click binding in affected Lib ... |
| CVE-2023-6186 | vulnerable (no DSA, ignored) | fixed | fixed | fixed | fixed | fixed | fixed | Insufficient macro permission validation of The Document Foundation Li ... |
| CVE-2023-2255 | vulnerable (no DSA, ignored) | fixed | fixed | fixed | fixed | fixed | fixed | Improper access control in editor components of The Document Foundatio ... |
| CVE-2022-38745 | vulnerable (no DSA, ignored) | fixed | fixed | fixed | fixed | fixed | fixed | Apache OpenOffice versions before 4.1.14 may be configured to add an e ... |
| CVE-2022-26307 | vulnerable (no DSA, ignored) | fixed | fixed | fixed | fixed | fixed | fixed | LibreOffice supports the storage of passwords for web connections in t ... |
| CVE-2022-26306 | vulnerable (no DSA, ignored) | fixed | fixed | fixed | fixed | fixed | fixed | LibreOffice supports the storage of passwords for web connections in t ... |
| CVE-2022-26305 | vulnerable (no DSA, ignored) | fixed | fixed | fixed | fixed | fixed | fixed | An Improper Certificate Validation vulnerability in LibreOffice existe ... |
| CVE-2022-3140 | vulnerable (no DSA, ignored) | fixed | fixed | fixed | fixed | fixed | fixed | LibreOffice supports Office URI Schemes to enable browser integration ... |
| CVE-2021-25636 | vulnerable (no DSA, ignored) | fixed | fixed | fixed | fixed | fixed | fixed | LibreOffice supports digital signatures of ODF documents and macros wi ... |
| CVE-2021-25634 | fixed | fixed | vulnerable (no DSA, ignored) | fixed | fixed | fixed | fixed | LibreOffice supports digital signatures of ODF documents and macros wi ... |
| CVE-2021-25633 | vulnerable (no DSA, ignored) | vulnerable (no DSA, ignored) | vulnerable (no DSA, ignored) | fixed | fixed | fixed | fixed | LibreOffice supports digital signatures of ODF documents and macros wi ... |
| CVE-2020-12803 | vulnerable (no DSA, ignored) | fixed | fixed | fixed | fixed | fixed | fixed | ODF documents can contain forms to be filled out by the user. Similar ... |
| CVE-2020-12802 | vulnerable (no DSA, ignored) | fixed | fixed | fixed | fixed | fixed | fixed | LibreOffice has a 'stealth mode' in which only documents from location ... |
| CVE-2020-12801 | vulnerable (no DSA, ignored) | fixed | fixed | fixed | fixed | fixed | fixed | If LibreOffice has an encrypted document open and crashes, that docume ... |
| Bug | Description |
|---|
| CVE-2024-5261 | Improper Certificate Validation vulnerability in LibreOffice "LibreOff ... |
| CVE-2023-6185 | Improper Input Validation vulnerability in GStreamer integration of Th ... |
| CVE-2023-0950 | Improper Validation of Array Index vulnerability in the spreadsheet co ... |
| CVE-2021-33035 | Apache OpenOffice opens dBase/DBF documents and shows the contents as ... |
| CVE-2021-25635 | |
| CVE-2021-25631 | In the LibreOffice 7-1 series in versions prior to 7.1.2, and in the 7 ... |
| CVE-2019-9855 | LibreOffice is typically bundled with LibreLogo, a programmable turtle ... |
| CVE-2019-9854 | LibreOffice has a feature where documents can specify that pre-install ... |
| CVE-2019-9853 | LibreOffice documents can contain macros. The execution of those macro ... |
| CVE-2019-9852 | LibreOffice has a feature where documents can specify that pre-install ... |
| CVE-2019-9851 | LibreOffice is typically bundled with LibreLogo, a programmable turtle ... |
| CVE-2019-9850 | LibreOffice is typically bundled with LibreLogo, a programmable turtle ... |
| CVE-2019-9849 | LibreOffice has a 'stealth mode' in which only documents from location ... |
| CVE-2019-9848 | LibreOffice has a feature where documents can specify that pre-install ... |
| CVE-2019-9847 | A vulnerability in LibreOffice hyperlink processing allows an attacker ... |
| CVE-2018-16858 | It was found that libreoffice before versions 6.0.7 and 6.1.3 was vuln ... |
| CVE-2018-14939 | The get_app_path function in desktop/unx/source/start.c in LibreOffice ... |
| CVE-2018-11790 | When loading a document with Apache Open Office 4.1.5 and earlier with ... |
| CVE-2018-10120 | The SwCTBWrapper::Read function in sw/source/filter/ww8/ww8toolbar.cxx ... |
| CVE-2018-10119 | sot/source/sdstor/stgstrms.cxx in LibreOffice before 5.4.5.1 and 6.x b ... |
| CVE-2018-6871 | LibreOffice before 5.4.5 and 6.x before 6.0.1 allows remote attackers ... |
| CVE-2017-12608 | A vulnerability in Apache OpenOffice Writer DOC file parser before 4.1 ... |
| CVE-2017-12607 | A vulnerability in OpenOffice's PPT file parser before 4.1.4, and spec ... |
| CVE-2017-9806 | A vulnerability in the OpenOffice Writer DOC file parser before 4.1.4, ... |
| CVE-2017-8358 | LibreOffice before 2017-03-17 has an out-of-bounds write caused by a h ... |
| CVE-2017-7882 | LibreOffice before 2017-03-14 has an out-of-bounds write related to th ... |
| CVE-2017-7870 | LibreOffice before 2017-01-02 has an out-of-bounds write caused by a h ... |
| CVE-2017-7856 | LibreOffice before 2017-03-11 has an out-of-bounds write caused by a h ... |
| CVE-2017-3157 | By exploiting the way Apache OpenOffice before 4.1.4 renders embedded ... |
| CVE-2016-10327 | LibreOffice before 2016-12-22 has an out-of-bounds write caused by a h ... |
| CVE-2016-4324 | Use-after-free vulnerability in LibreOffice before 5.1.4 allows remote ... |
| CVE-2016-1513 | The Impress tool in Apache OpenOffice 4.1.2 and earlier allows remote ... |
| CVE-2016-0795 | LibreOffice before 5.0.5 allows remote attackers to cause a denial of ... |
| CVE-2016-0794 | The lwp filter in LibreOffice before 5.0.4 allows remote attackers to ... |
| CVE-2015-5214 | LibreOffice before 4.4.6 and 5.x before 5.0.1 and Apache OpenOffice be ... |
| CVE-2015-5213 | Integer overflow in LibreOffice before 4.4.5 and Apache OpenOffice bef ... |
| CVE-2015-5212 | Integer underflow in LibreOffice before 4.4.5 and Apache OpenOffice be ... |
| CVE-2015-4551 | LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2 uses the s ... |
| CVE-2015-1774 | The HWP filter in LibreOffice before 4.3.7 and 4.4.x before 4.4.2 and ... |
| CVE-2014-9093 | LibreOffice before 4.3.5 allows remote attackers to cause a denial of ... |
| CVE-2014-3693 | Use-after-free vulnerability in the socket manager of Impress Remote i ... |
| CVE-2014-0247 | LibreOffice 4.2.4 executes unspecified VBA macros automatically, which ... |
| CVE-2013-4156 | Apache OpenOffice.org (OOo) before 4.0 allows remote attackers to caus ... |
| CVE-2013-2189 | Apache OpenOffice.org (OOo) before 4.0 allows remote attackers to caus ... |
| CVE-2012-4233 | LibreOffice 3.5.x before 3.5.7.2 and 3.6.x before 3.6.1, and OpenOffic ... |
| CVE-2012-2665 | Multiple heap-based buffer overflows in the XML manifest encryption ta ... |
| CVE-2012-2334 | Integer overflow in filter/source/msfilter/msdffimp.cxx in OpenOffice. ... |
| CVE-2012-1149 | Integer overflow in the vclmi.dll module in OpenOffice.org (OOo) 3.3, ... |
| CVE-2011-2713 | oowriter in OpenOffice.org 3.3.0 and LibreOffice before 3.4.3 allows u ... |
| CVE-2011-2685 | Stack-based buffer overflow in the Lotus Word Pro import filter in Lib ... |