[CVE-2026-63270 ] Published: Oct 5, 2026, 11:17:24 AM UTC
libreoffice: CVE-2026-63270
Medium(6.7) Sconosciuto Dettagli (2) 4:7.4.7-1+deb12u14 · amd64 · bookworm
Sconosciuto · Corretta: 4:25.2.3-2+deb13u8, 4:26.2.5.2-1
Version impact unknown
dsa · libreoffice · debian · bookworm; pypi · libreoffice · debian · 12; pypi · libreoffice · debian · 13; pypi · libreoffice · debian · 14
4:7.4.7-1+deb12u14 · arm64 · bookworm
Sconosciuto · Corretta: 4:25.2.3-2+deb13u8, 4:26.2.5.2-1
Version impact unknown
dsa · libreoffice · debian · bookworm; pypi · libreoffice · debian · 12; pypi · libreoffice · debian · 13; pypi · libreoffice · debian · 14
[CVE-2026-63269 ] Published: Oct 5, 2026, 11:17:23 AM UTC
libreoffice: CVE-2026-63269
Medium(6.7) Sconosciuto Dettagli (2) 4:7.4.7-1+deb12u14 · amd64 · bookworm
Sconosciuto · Corretta: 4:25.2.3-2+deb13u8, 4:26.2.5.2-1
Version impact unknown
dsa · libreoffice · debian · bookworm; pypi · libreoffice · debian · 12; pypi · libreoffice · debian · 13; pypi · libreoffice · debian · 14
4:7.4.7-1+deb12u14 · arm64 · bookworm
Sconosciuto · Corretta: 4:25.2.3-2+deb13u8, 4:26.2.5.2-1
Version impact unknown
dsa · libreoffice · debian · bookworm; pypi · libreoffice · debian · 12; pypi · libreoffice · debian · 13; pypi · libreoffice · debian · 14
[CVE-2026-63268 ] Published: Oct 5, 2026, 11:17:22 AM UTC
libreoffice: CVE-2026-63268
Medium(6.7) Sconosciuto Dettagli (2) 4:7.4.7-1+deb12u14 · amd64 · bookworm
Sconosciuto · Corretta: 4:25.2.3-2+deb13u8, 4:26.2.5.2-1
Version impact unknown
dsa · libreoffice · debian · bookworm; pypi · libreoffice · debian · 12; pypi · libreoffice · debian · 13; pypi · libreoffice · debian · 14
4:7.4.7-1+deb12u14 · arm64 · bookworm
Sconosciuto · Corretta: 4:25.2.3-2+deb13u8, 4:26.2.5.2-1
Version impact unknown
dsa · libreoffice · debian · bookworm; pypi · libreoffice · debian · 12; pypi · libreoffice · debian · 13; pypi · libreoffice · debian · 14
[CVE-2026-63267 ] Published: Oct 5, 2026, 11:17:22 AM UTC
libreoffice: CVE-2026-63267
Medium(6.7) Sconosciuto Dettagli (2) 4:7.4.7-1+deb12u14 · amd64 · bookworm
Sconosciuto · Corretta: 4:25.2.3-2+deb13u8, 4:26.2.5.2-1
Version impact unknown
dsa · libreoffice · debian · bookworm; pypi · libreoffice · debian · 12; pypi · libreoffice · debian · 13; pypi · libreoffice · debian · 14
4:7.4.7-1+deb12u14 · arm64 · bookworm
Sconosciuto · Corretta: 4:25.2.3-2+deb13u8, 4:26.2.5.2-1
Version impact unknown
dsa · libreoffice · debian · bookworm; pypi · libreoffice · debian · 12; pypi · libreoffice · debian · 13; pypi · libreoffice · debian · 14
[CVE-2026-63266 ] Published: Oct 5, 2026, 11:17:21 AM UTC
libreoffice: CVE-2026-63266
Medium(6.8) Sconosciuto Dettagli (2) 4:7.4.7-1+deb12u14 · amd64 · bookworm
Sconosciuto · Corretta: 4:25.2.3-2+deb13u8, 4:26.2.5.2-1
Version impact unknown
dsa · libreoffice · debian · bookworm; pypi · libreoffice · debian · 12; pypi · libreoffice · debian · 13; pypi · libreoffice · debian · 14
4:7.4.7-1+deb12u14 · arm64 · bookworm
Sconosciuto · Corretta: 4:25.2.3-2+deb13u8, 4:26.2.5.2-1
Version impact unknown
dsa · libreoffice · debian · bookworm; pypi · libreoffice · debian · 12; pypi · libreoffice · debian · 13; pypi · libreoffice · debian · 14
[CVE-2026-63277 ] Published: Oct 5, 2026, 11:17:20 AM UTC
libreoffice: CVE-2026-63277
High(8.5) Sconosciuto Dettagli (2) 4:7.4.7-1+deb12u14 · amd64 · bookworm
Sconosciuto · Corretta: 4:25.2.3-2+deb13u8, 4:26.2.5.2-1
Version impact unknown
dsa · libreoffice · debian · bookworm; pypi · libreoffice · debian · 12; pypi · libreoffice · debian · 13; pypi · libreoffice · debian · 14
4:7.4.7-1+deb12u14 · arm64 · bookworm
Sconosciuto · Corretta: 4:25.2.3-2+deb13u8, 4:26.2.5.2-1
Version impact unknown
dsa · libreoffice · debian · bookworm; pypi · libreoffice · debian · 12; pypi · libreoffice · debian · 13; pypi · libreoffice · debian · 14
[CVE-2026-63279 ] Published: Sep 22, 2026, 11:10:41 AM UTC
LibreOffice can import PICT images, which may be embedded in documents. An out of bounds read existed when importing an image that uses a colour palette. The palette index held in the image data was u
High(7.3) Sconosciuto Dettagli (2) 4:7.4.7-1+deb12u14 · amd64 · bookworm
Sconosciuto · Corretta: 4:25.2.3-2+deb13u7, 4:26.2.5.2-1
Version impact unknown
nvd · libreoffice · debian · bookworm; pypi · libreoffice · debian · 12; pypi · libreoffice · debian · 13; pypi · libreoffice · debian · 14
4:7.4.7-1+deb12u14 · arm64 · bookworm
Sconosciuto · Corretta: 4:25.2.3-2+deb13u7, 4:26.2.5.2-1
Version impact unknown
nvd · libreoffice · debian · bookworm; pypi · libreoffice · debian · 12; pypi · libreoffice · debian · 13; pypi · libreoffice · debian · 14
[CVE-2026-63278 ] Published: Sep 22, 2026, 11:10:36 AM UTC
URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information could be exfiltrated to a remote server on opening a document containing such lin
High(7.3) Sconosciuto Dettagli (2) 4:7.4.7-1+deb12u14 · amd64 · bookworm
Sconosciuto · Corretta: 4:25.2.3-2+deb13u7, 4:26.2.5.2-1
Version impact unknown
nvd · libreoffice · debian · bookworm; pypi · libreoffice · debian · 12; pypi · libreoffice · debian · 13; pypi · libreoffice · debian · 14
4:7.4.7-1+deb12u14 · arm64 · bookworm
Sconosciuto · Corretta: 4:25.2.3-2+deb13u7, 4:26.2.5.2-1
Version impact unknown
nvd · libreoffice · debian · bookworm; pypi · libreoffice · debian · 12; pypi · libreoffice · debian · 13; pypi · libreoffice · debian · 14
[CVE-2026-63276 ] Published: Sep 22, 2026, 11:10:32 AM UTC
LibreOffice converts CFF fonts to Type 1 when it subsets a font, which happens when a document is exported to PDF, and CFF fonts may be embedded in documents. A stack buffer overflow existed in that c
High(7.3) Sconosciuto Dettagli (2) 4:7.4.7-1+deb12u14 · amd64 · bookworm
Sconosciuto · Corretta: 4:25.2.3-2+deb13u7, 4:26.2.5.2-1
Version impact unknown
nvd · libreoffice · debian · bookworm; pypi · libreoffice · debian · 12; pypi · libreoffice · debian · 13; pypi · libreoffice · debian · 14
4:7.4.7-1+deb12u14 · arm64 · bookworm
Sconosciuto · Corretta: 4:25.2.3-2+deb13u7, 4:26.2.5.2-1
Version impact unknown
nvd · libreoffice · debian · bookworm; pypi · libreoffice · debian · 12; pypi · libreoffice · debian · 13; pypi · libreoffice · debian · 14
[CVE-2026-63275 ] Published: Sep 22, 2026, 11:10:26 AM UTC
LibreOffice can read CFF fonts, which may be embedded in documents. A stack buffer overflow existed when reading the hints of a glyph. The number of hints was checked against the wrong bound, so a gly
High(7.3) Sconosciuto Dettagli (2) 4:7.4.7-1+deb12u14 · amd64 · bookworm
Sconosciuto · Corretta: 4:25.2.3-2+deb13u7, 4:26.2.5.2-1
Version impact unknown
nvd · libreoffice · debian · bookworm; pypi · libreoffice · debian · 12; pypi · libreoffice · debian · 13; pypi · libreoffice · debian · 14
4:7.4.7-1+deb12u14 · arm64 · bookworm
Sconosciuto · Corretta: 4:25.2.3-2+deb13u7, 4:26.2.5.2-1
Version impact unknown
nvd · libreoffice · debian · bookworm; pypi · libreoffice · debian · 12; pypi · libreoffice · debian · 13; pypi · libreoffice · debian · 14
[CVE-2026-63274 ] Published: Sep 22, 2026, 11:10:19 AM UTC
LibreOffice Draw can import PDF documents. A heap buffer overflow existed when importing a stream object. The length of the stream was taken from the object's own dictionary and was not checked agains
High(7.3) Sconosciuto Dettagli (2) 4:7.4.7-1+deb12u14 · amd64 · bookworm
Sconosciuto · Corretta: 4:25.2.3-2+deb13u7, 4:26.2.5.2-1
Version impact unknown
nvd · libreoffice · debian · bookworm; pypi · libreoffice · debian · 12; pypi · libreoffice · debian · 13; pypi · libreoffice · debian · 14
4:7.4.7-1+deb12u14 · arm64 · bookworm
Sconosciuto · Corretta: 4:25.2.3-2+deb13u7, 4:26.2.5.2-1
Version impact unknown
nvd · libreoffice · debian · bookworm; pypi · libreoffice · debian · 12; pypi · libreoffice · debian · 13; pypi · libreoffice · debian · 14
[CVE-2026-63273 ] Published: Sep 22, 2026, 11:10:13 AM UTC
LibreOffice Draw can import PDF documents. A heap buffer overflow existed when importing an encrypted document. The length of the decryption key was taken from the document's own encryption dictionary
High(7.3) Sconosciuto Dettagli (2) 4:7.4.7-1+deb12u14 · amd64 · bookworm
Sconosciuto · Corretta: 4:25.2.3-2+deb13u7, 4:26.2.5.2-1
Version impact unknown
nvd · libreoffice · debian · bookworm; pypi · libreoffice · debian · 12; pypi · libreoffice · debian · 13; pypi · libreoffice · debian · 14
4:7.4.7-1+deb12u14 · arm64 · bookworm
Sconosciuto · Corretta: 4:25.2.3-2+deb13u7, 4:26.2.5.2-1
Version impact unknown
nvd · libreoffice · debian · bookworm; pypi · libreoffice · debian · 12; pypi · libreoffice · debian · 13; pypi · libreoffice · debian · 14
[CVE-2026-63272 ] Published: Sep 22, 2026, 11:10:03 AM UTC
LibreOffice can import WMF graphics, which may be embedded in documents. A heap buffer overflow existed when importing a text record that carries its own character advance widths. The count of advance
High(7.3) Sconosciuto Dettagli (2) 4:7.4.7-1+deb12u14 · amd64 · bookworm
Sconosciuto · Corretta: 4:25.2.3-2+deb13u7, 4:26.2.5.2-1
Version impact unknown
nvd · libreoffice · debian · bookworm; pypi · libreoffice · debian · 12; pypi · libreoffice · debian · 13; pypi · libreoffice · debian · 14
4:7.4.7-1+deb12u14 · arm64 · bookworm
Sconosciuto · Corretta: 4:25.2.3-2+deb13u7, 4:26.2.5.2-1
Version impact unknown
nvd · libreoffice · debian · bookworm; pypi · libreoffice · debian · 12; pypi · libreoffice · debian · 13; pypi · libreoffice · debian · 14
[CVE-2026-8358 ] Published: Jun 15, 2026, 4:24:03 PM UTC
LibreOffice Calc can import tracked changes from a spreadsheet document. A heap buffer overflow existed when a document reused the same change identifier for two different kinds of change. The importe
Medium(6.6) Sconosciuto Dettagli (2) 4:7.4.7-1+deb12u14 · amd64 · bookworm
Sconosciuto · Corretta: 4:25.2.3-2+deb13u5, 4:26.2.4.2-1, 4:7.4.7-1+deb12u13
Version impact unknown
nvd · libreoffice · debian · bookworm; pypi · libreoffice · debian · 12; pypi · libreoffice · debian · 13; pypi · libreoffice · debian · 14
4:7.4.7-1+deb12u14 · arm64 · bookworm
Sconosciuto · Corretta: 4:25.2.3-2+deb13u5, 4:26.2.4.2-1, 4:7.4.7-1+deb12u13
Version impact unknown
nvd · libreoffice · debian · bookworm; pypi · libreoffice · debian · 12; pypi · libreoffice · debian · 13; pypi · libreoffice · debian · 14
[CVE-2026-8357 ] Published: Jun 15, 2026, 4:23:37 PM UTC
LibreOffice Calc compiles cell formulas when opening a spreadsheet. A heap buffer overflow existed when compiling a very long formula made up of many opening tokens. The array that tracks nesting dept
High(7.8) Sconosciuto Dettagli (2) 4:7.4.7-1+deb12u14 · amd64 · bookworm
Sconosciuto · Corretta: 4:25.2.3-2+deb13u5, 4:26.2.4.2-1, 4:7.4.7-1+deb12u13
Version impact unknown
nvd · libreoffice · debian · bookworm; pypi · libreoffice · debian · 12; pypi · libreoffice · debian · 13; pypi · libreoffice · debian · 14
4:7.4.7-1+deb12u14 · arm64 · bookworm
Sconosciuto · Corretta: 4:25.2.3-2+deb13u5, 4:26.2.4.2-1, 4:7.4.7-1+deb12u13
Version impact unknown
nvd · libreoffice · debian · bookworm; pypi · libreoffice · debian · 12; pypi · libreoffice · debian · 13; pypi · libreoffice · debian · 14
[CVE-2026-8356 ] Published: Jun 15, 2026, 4:23:06 PM UTC
LibreOffice can import presentations in the legacy binary PPT format. A stack buffer overflow existed when importing a colour-replacement record. Two fixed-size colour tables were filled from the file
Medium(5.5) Sconosciuto Dettagli (2) 4:7.4.7-1+deb12u14 · amd64 · bookworm
Sconosciuto · Corretta: 4:25.2.3-2+deb13u5, 4:26.2.4.2-1, 4:7.4.7-1+deb12u13
Version impact unknown
nvd · libreoffice · debian · bookworm; pypi · libreoffice · debian · 12; pypi · libreoffice · debian · 13; pypi · libreoffice · debian · 14
4:7.4.7-1+deb12u14 · arm64 · bookworm
Sconosciuto · Corretta: 4:25.2.3-2+deb13u5, 4:26.2.4.2-1, 4:7.4.7-1+deb12u13
Version impact unknown
nvd · libreoffice · debian · bookworm; pypi · libreoffice · debian · 12; pypi · libreoffice · debian · 13; pypi · libreoffice · debian · 14
[CVE-2026-6047 ] Published: Jun 15, 2026, 4:22:37 PM UTC
LibreOffice can import documents in the OOXML format (DOCX). A heap buffer overflow existed when replaying deferred parser events for a text box element. A handler object was assumed to be of one type
Medium(5.4) Sconosciuto Dettagli (2) 4:7.4.7-1+deb12u14 · amd64 · bookworm
Sconosciuto · Corretta: 4:26.2.3.2-2
Version impact unknown
nvd · libreoffice · debian · bookworm; pypi · libreoffice · debian · 14
4:7.4.7-1+deb12u14 · arm64 · bookworm
Sconosciuto · Corretta: 4:26.2.3.2-2
Version impact unknown
nvd · libreoffice · debian · bookworm; pypi · libreoffice · debian · 14
[CVE-2026-6045 ] Published: Jun 15, 2026, 4:22:16 PM UTC
LibreOffice can import EMF+ graphics, which may be embedded in documents. A heap buffer overflow existed when importing an EMF+ gradient brush. The number of gradient blend points was read from the fi
Medium(6.6) Sconosciuto Dettagli (2) 4:7.4.7-1+deb12u14 · amd64 · bookworm
Sconosciuto · Corretta: 4:25.2.3-2+deb13u5, 4:26.2.3.2-2, 4:7.4.7-1+deb12u13
Version impact unknown
nvd · libreoffice · debian · bookworm; pypi · libreoffice · debian · 12; pypi · libreoffice · debian · 13; pypi · libreoffice · debian · 14
4:7.4.7-1+deb12u14 · arm64 · bookworm
Sconosciuto · Corretta: 4:25.2.3-2+deb13u5, 4:26.2.3.2-2, 4:7.4.7-1+deb12u13
Version impact unknown
nvd · libreoffice · debian · bookworm; pypi · libreoffice · debian · 12; pypi · libreoffice · debian · 13; pypi · libreoffice · debian · 14
[CVE-2026-6040 ] Published: Jun 15, 2026, 4:21:53 PM UTC
A heap use-after-free existed when importing the blank-width characters of an ODF number format. A position value read from the document was not checked against the length of the format-code string, s
High(7.3) Sconosciuto Dettagli (2) 4:7.4.7-1+deb12u14 · amd64 · bookworm
Sconosciuto · Corretta: 4:25.2.3-2+deb13u5, 4:26.2.3.2-2
Version impact unknown
nvd · libreoffice · debian · bookworm; pypi · libreoffice · debian · 13; pypi · libreoffice · debian · 14
4:7.4.7-1+deb12u14 · arm64 · bookworm
Sconosciuto · Corretta: 4:25.2.3-2+deb13u5, 4:26.2.3.2-2
Version impact unknown
nvd · libreoffice · debian · bookworm; pypi · libreoffice · debian · 13; pypi · libreoffice · debian · 14
[CVE-2026-6039 ] Published: Jun 15, 2026, 4:21:16 PM UTC
LibreOffice can import drawings in the DXF format used by CAD software. A heap buffer overflow existed when importing a DXF polyline. The point count taken from the file was truncated to a 16-bit valu
Medium(5.5) Sconosciuto Dettagli (2) 4:7.4.7-1+deb12u14 · amd64 · bookworm
Sconosciuto · Corretta: 4:25.2.3-2+deb13u5, 4:26.2.3.2-2, 4:7.4.7-1+deb12u13
Version impact unknown
nvd · libreoffice · debian · bookworm; pypi · libreoffice · debian · 12; pypi · libreoffice · debian · 13; pypi · libreoffice · debian · 14
4:7.4.7-1+deb12u14 · arm64 · bookworm
Sconosciuto · Corretta: 4:25.2.3-2+deb13u5, 4:26.2.3.2-2, 4:7.4.7-1+deb12u13
Version impact unknown
nvd · libreoffice · debian · bookworm; pypi · libreoffice · debian · 12; pypi · libreoffice · debian · 13; pypi · libreoffice · debian · 14