Skip to content
OpenAdvisories
High USN-7337-1 1 CVE

libreoffice vulnerability

Published Mar 10, 2025 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

It was discovered that LibreOffice incorrectly handled Office URI Schemes.
If a user or automated system were tricked into opening a specially crafted
LibreOffice file, a remote attacker could possibly use this issue to call
internal macros.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 20.04 LTS 20.04:LTS libreoffice 1:6.4.7-0ubuntu0.20.04.14
Ubuntu · 22.04 LTS 22.04:LTS libreoffice 1:7.3.7-0ubuntu0.22.04.9
Ubuntu · 24.04 LTS 24.04:LTS libreoffice 4:24.2.7-0ubuntu0.24.04.3

Vulnerabilities 1

  • High 7.2
    CVE-2025-1080

    Macro URL arbitrary script execution

    LibreOffice supports Office URI Schemes to enable browser integration of LibreOffice with MS SharePoint server. An additional scheme 'vnd.libreoffice.command' specific to LibreOffice was added. In the affected versions of LibreOffice a link in a browser using…

    The Document Foundation LibreOffice libreoffice libreoffice Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2025-1080