THE Document Foundation vulnerabilities
49 CVEs and advisories name THE Document Foundation as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-76181Heap buffer overflow in dBASE index import
- CVE-2026-63270Environment/ini-file leaks
- CVE-2026-63269LFI and GET SSRF via GStreamer and HLS playlists
- CVE-2026-63268LFI via calcext:data-mappings, sql provider and sdbc:flat:file:// db href
- CVE-2026-63267LFI and GET SSRF via calcext:data-mappings and csv provider
- CVE-2026-63266Arbitrary file write via calcext:data-mappings, sql provider and Firebird backup functionality
- CVE-2026-63277RCE via calcext:data-mappings, sql provider and jdbc connector
- CVE-2026-63279Out of bounds read in PICT image import
- CVE-2026-63278Package URLs can be used to exfiltrate arbitrary INI file values and environment variables
- CVE-2026-63276Stack buffer overflow in CFF to Type 1 font conversion
- CVE-2026-63275Stack buffer overflow in CFF font hint handling
- CVE-2026-63274Heap buffer overflow in PDF import stream handling
- CVE-2026-63273Heap buffer overflow in PDF import encryption handling
- CVE-2026-63272Heap buffer overflow in WMF text record import
- CVE-2026-8358Heap buffer overflow in spreadsheet tracked-changes import
- CVE-2026-8357Heap buffer overflow in Calc formula compilation
- CVE-2026-8356Stack buffer overflow in PPT presentation import
- CVE-2026-6047Heap buffer overflow in OOXML text box element import
- CVE-2026-6045Heap buffer overflow in EMF+ gradient brush import
- CVE-2026-6040Heap use-after-free in ODF number-format blank-width parsing
- CVE-2026-6039Heap buffer overflow in DXF polyline import
- CVE-2026-4430Heap Buffer Overflow in AgileEngine
- CVE-2025-14714TCC Bypass via Inherited Permissions in Bundled Interpreter
- CVE-2025-2866PDF signature forgery with adbe.pkcs7.sha1 SubFilter
- CVE-2021-25635Content Manipulation with Certificate Validation Attack
- CVE-2025-1080Macro URL arbitrary script execution
- CVE-2025-0514Executable hyperlink Windows path targets executed unconditionally on activation
- CVE-2024-12426URL fetching can be used to exfiltrate arbitrary INI file values and environment variables
- CVE-2024-12425Path traversal leading to arbitrary .ttf file write
- CVE-2024-7788Signatures in "repair mode" should not be trusted