Document Foundation vulnerabilities

Newest CVEs

• CVE-2019-9853

  Insufficient URL decoding flaw in categorizing macro location

  Document Foundation · LibreOffice

  High7.8
• CVE-2019-9855

  Windows 8.3 path equivalence handling flaw allows LibreLogo script execution

  Document Foundation · LibreOffice

  Critical9.8
• CVE-2019-9854

  Unsafe URL assembly flaw in allowed script location check

  Document Foundation · LibreOffice

  High7.8
• CVE-2019-9852

  Insufficient URL encoding flaw in allowed script location check

  Document Foundation · LibreOffice

  High7.8
• CVE-2019-9851

  LibreLogo global-event script execution

  Document Foundation · LibreOffice

  Critical9.8
• CVE-2019-9850

  Insufficient url validation allowing LibreLogo script execution

  Document Foundation · LibreOffice

  Critical9.8
• CVE-2019-9849

  LibreOffice has a 'stealth mode' in which only documents from locations deemed 'trusted' are allowed to retrieve remote resources. This mode is not the default…

  Document Foundation · LibreOffice

  Medium4.3
• CVE-2019-9848

  LibreOffice has a feature where documents can specify that pre-installed scripts can be executed on various document events such as mouse-over, etc.…

  Document Foundation · LibreOffice

  Critical9.8
• CVE-2019-9847

  Executable hyperlink targets executed unconditionally on activation

  Document Foundation · LibreOffice

  High7.8