LibreOffice information leakage vulnerability

LibreOffice is an open source office software suite from The Document Foundation. An information disclosure vulnerability exists in LibreOffice versions prior to 24.8 through 24.8.4, which stems from improper exposure of environment variables and INI file values, which could result in sensitive...

CVE-2021-31804

LeoCAD before 21.03 sometimes allows a use-after-free during the opening of a new document...

CVE-2021-31804

LeoCAD before 21.03 sometimes allows a use-after-free during the opening of a new document...

Mozilla: Crash with nested event loops

When manipulating user events in nested loops while opening a document through script, it is possible to trigger a potentially exploitable crash due to poor event handling. This vulnerability affects Firefox 63, Firefox ESR 60.3, and Thunderbird 60.3...

Mozilla: Crash with nested event loops

When manipulating user events in nested loops while opening a document through script, it is possible to trigger a potentially exploitable crash due to poor event handling. This vulnerability affects Firefox 63, Firefox ESR 60.3, and Thunderbird 60.3...

UBUNTU-CVE-2018-12392

When manipulating user events in nested loops while opening a document through script, it is possible to trigger a potentially exploitable crash due to poor event handling. This vulnerability affects Firefox 63, Firefox ESR 60.3, and Thunderbird 60.3...

Microsoft Office Token Access

The vulnerability of Microsoft Office software relates to errors in processing a specially crafted response when attempting to open an Office document located on a malicious website. Exploiting this vulnerability allows a malicious actor to obtain access tokens used for authenticating the current...