Skip to content
OpenAdvisories

Vendor

The Document Foundation

49 known vulnerabilities.

Products

LibreOffice 48 LibreOffice Online 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.5
    CVE-2026-63277 Public exploit

    RCE via calcext:data-mappings, sql provider and jdbc connector

    LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A document could name a Java database driver for such a link to be loaded from a remote location, so opening the document could run Java code from that l…

    The Document Foundation LibreOffice libreoffice libreoffice Debian Ubuntu
  • Unscored —
    CVE-2023-2255 Public exploit

    Remote documents loaded without prompt via IFrame

    Improper access control in editor components of The Document Foundation LibreOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. In the affected versions of LibreOffice documents that used "floating fram…

    The Document Foundation LibreOffice libreoffice libreoffice Debian Ubuntu