The vulnerability of the LibreOffice office software package, related to improper verification of the cryptographic signature, allows a perpetrator to forge digital signatures.

The vulnerability of the LibreOffice office software package is related to improper verification of the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to forge digital signatures remotely...

CVE-2020-27604

BigBlueButton before 2.3 does not implement LibreOffice sandboxing. This might make it easier for remote authenticated users to read the API shared secret in the bigbluebutton.properties file. With the API shared secret, an attacker can for example use api/join to join an arbitrary meeting...

CVE-2020-27603

BigBlueButton before 2.2.27 has an unsafe JODConverter setting in which LibreOffice document conversions can access external files...

CLSA-2025-1747253770 libreoffice: Fix of CVE-2023-1183

CVE-2023-1183: disable script command file dump to prevent arbitrary writes...

Alibaba Cloud Linux 3 : 0099: libreoffice (ALINUX3-SA-2024:0099)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2024:0099 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2023-6185: Improper Input Validation...

Alibaba Cloud Linux 3 : 0198: libreoffice (ALINUX3-SA-2024:0198)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2024:0198 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2024-3044: Unchecked script execution ...

Alibaba Cloud Linux 3 : 0038: libreoffice (ALINUX3-SA-2022:0038)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2022:0038 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2019-9849: LibreOffice has a 'stealth...

Alibaba Cloud Linux 3 : 0052: libreoffice (ALINUX3-SA-2025:0052)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2025:0052 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2025-1080: LibreOffice supports Office URI...

Alibaba Cloud Linux 3 : 0072: libreoffice (ALINUX3-SA-2024:0072)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2024:0072 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2022-26305: An Improper Certificate...

Alibaba Cloud Linux 3 : 0201: libreoffice (ALINUX3-SA-2022:0201)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2022:0201 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2021-25633: LibreOffice supports digit...

libreoffice:htmlfuzzer: Heap-use-after-free in SwTextNode::Len

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5537016983126016 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: htmlfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash...

Mageia: Security Advisory (MGASA-2025-0154)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2025-0154 Updated libreoffice packages fix security vulnerability

PDF signature forgery with adbe.pkcs7.sha1 SubFilter. CVE-2025-2866...

Updated libreoffice packages fix security vulnerability

PDF signature forgery with adbe.pkcs7.sha1 SubFilter. CVE-2025-2866...

Ubuntu: Security Advisory (USN-7504-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-7504-1 libreoffice vulnerability

Juraj Šarinay discovered that LibreOffice incorrectly handled verifying PDF signatures. A remote attacker could possibly use this issue to generate PDF files that appear to have a valid signature...

USN-7504-1: LibreOffice vulnerability

Juraj Šarinay discovered that LibreOffice incorrectly handled verifying PDF signatures. A remote attacker could possibly use this issue to generate PDF files that appear to have a valid signature...

Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 : LibreOffice vulnerability (USN-7504-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by a vulnerability as referenced in the USN-7504-1 advisory. Juraj arinay discovered that LibreOffice incorrectly handled verifying PDF signatures. A remote attacker could possibly use this...

LibreOffice Improper Validation of Array Index vulnerability (May 2025) - Windows

LibreOffice is prone to an improper validation of array index vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

LibreOffice Improper Validation of Array Index vulnerability (May 2025) - Linux

LibreOffice is prone to an improper validation of array index vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...