Skip to content
OpenAdvisories
High USN-6962-1 1 CVE

libreoffice vulnerability

Published Aug 15, 2024 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

It was discovered that LibreOffice incorrectly allowed users to enable
macros when a cryptographic signature failed to validate. If a user were
tricked into opening a specially crafted document, a remote attacker could
possibly execute arbitrary macros.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 20.04 LTS 20.04:LTS libreoffice 1:6.4.7-0ubuntu0.20.04.11
Ubuntu · 22.04 LTS 22.04:LTS libreoffice 1:7.3.7-0ubuntu0.22.04.6
Ubuntu · 24.04 LTS 24.04:LTS libreoffice 4:24.2.5-0ubuntu0.24.04.2

Vulnerabilities 1

  • High 7.8
    CVE-2024-6472

    Ability to trust not validated macro signatures removed in high security mode

    Certificate Validation user interface in LibreOffice allows potential vulnerability. Signed macros are scripts that have been digitally signed by the developer using a cryptographic signature. When a document with a signed macro is opened a warning is display…

    The Document Foundation LibreOffice libreoffice libreoffice Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2024-6472