Lucene search
Redhat.comRH:CVE-2023-6186HistoryDec 11, 2023 - 1:58 p.m.
CVE-2023-6186
2023-12-1113:58:22
redhat.com
access.redhat.com
37
cve-2023-6186
insufficient permission validation
libreoffice
hyperlinks
built-in macros
security vulnerability
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8.4
Confidence
High
EPSS
0.001
Percentile
31.7%
An insufficient permission validation vulnerability was found in LibreOffice. In versions that support running commands in hyperlinks, an attacker can execute built-in macros without warning the user.
Related
nessus
nessus
LibreOffice 7.5 < 7.5.9 / 7.6 < 7.6.4 Arbitrary Script Execution (Windows)
2023-12-14 00:00:00
LibreOffice 7.5 < 7.5.9 / 7.6 < 7.6.4 Arbitrary Script Execution (macOS)
2023-12-14 00:00:00
Oracle Linux 9 : libreoffice (ELSA-2024-1427)
2024-03-20 00:00:00
cve
cve
CVE-2023-6186
2023-12-11 12:15:07
alpinelinux
alpinelinux
CVE-2023-6186
2023-12-11 12:15:07
veracode
veracode
Improper Preservation Of Permissions
2023-12-15 06:33:46
osv
osv
CVE-2023-6186
2023-12-11 12:15:07
Important: libreoffice security update
2024-05-10 14:32:53
libreoffice vulnerabilities
2023-12-11 13:03:46
cnvd
cnvd
LibreOffice License Issues Vulnerabilities
2023-12-13 00:00:00
openvas
openvas
LibreOffice Code Execution Vulnerability (Nov 2024) - Linux
2024-11-21 00:00:00
LibreOffice Code Execution Vulnerability (Nov 2024) - Mac OS X
2024-11-21 00:00:00
LibreOffice Code Execution Vulnerability (Nov 2024) - Windows
2024-11-21 00:00:00
prion
prion
Design/Logic Flaw
2023-12-11 12:15:00
nvd
nvd
CVE-2023-6186
2023-12-11 12:15:07
ubuntucve
ubuntucve
CVE-2023-6186
2023-12-11 00:00:00
cvelist
cvelist
CVE-2023-6186 Link targets allow arbitrary script execution
2023-12-11 11:56:40
debiancve
debiancve
CVE-2023-6186
2023-12-11 12:15:07
rocky
rocky
libreoffice security update
2024-05-10 14:32:53
libreoffice security fix update
2024-03-27 04:34:32
libreoffice security update
2024-06-14 14:00:35
debian
debian
[SECURITY] [DSA 5574-1] libreoffice security update
2023-12-11 18:35:03
[SECURITY] [DLA 3703-1] libreoffice security update
2023-12-31 09:28:21
redhat
redhat
(RHSA-2024:1425) Important: libreoffice security update
2024-03-19 17:34:14
(RHSA-2024:3835) Important: libreoffice security update
2024-06-11 18:27:29
(RHSA-2024:1514) Important: libreoffice security fix update
2024-03-26 11:46:13
ubuntu
ubuntu
LibreOffice vulnerabilities
2023-12-14 00:00:00
LibreOffice vulnerabilities
2023-12-11 00:00:00
fedora
fedora
[SECURITY] Fedora 38 Update: libreoffice-7.5.9.2-1.fc38
2023-12-13 01:34:52
[SECURITY] Fedora 38 Update: libcmis-0.6.2-1.fc38
2023-12-13 01:34:52
oraclelinux
oraclelinux
libreoffice security fix update
2024-03-28 00:00:00
libreoffice security update
2024-03-20 00:00:00
libreoffice security update
2024-06-12 00:00:00
almalinux
almalinux
Important: libreoffice security update
2024-06-11 00:00:00
Important: libreoffice security fix update
2024-03-26 00:00:00
Important: libreoffice security update
2024-03-19 00:00:00
redos
redos
ROS-20240408-07
2024-04-08 00:00:00
kaspersky
kaspersky
KLA62374 Multiple vulnerabilities in LibreOffice
2023-12-11 00:00:00
gentoo
gentoo
LibreOffice: Multiple Vulnerabilities
2024-02-21 00:00:00
mageia
mageia
Updated libreoffice packages fix security vulnerabilities
2024-04-10 07:03:52
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8.4
Confidence
High
EPSS
0.001
Percentile
31.7%
Related for RH:CVE-2023-6186