THE Document Foundation vulnerabilities
49 CVEs and advisories name THE Document Foundation as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-6472Ability to trust not validated macro signatures removed in high security mode
- CVE-2024-5261TLS certificate are not properly verified when utilizing LibreOfficeKit
- CVE-2024-3044Graphic on-click binding allows unchecked script execution
- CVE-2023-6186Link targets allow arbitrary script execution
- CVE-2023-6185Improper input validation enabling arbitrary Gstreamer pipeline injection
- CVE-2023-2255Remote documents loaded without prompt via IFrame
- CVE-2023-0950Array Index UnderFlow in Calc Formula Parsing
- CVE-2022-3140Macro URL arbitrary script execution
- CVE-2022-26307Weak Master Keys
- CVE-2022-26306Execution of Untrusted Macros Due to Improper Certificate Validation
- CVE-2022-26305Execution of Untrusted Macros Due to Improper Certificate Validation
- CVE-2021-25636Incorrect trust validation of signature with ambiguous KeyInfo children
- CVE-2021-25634Timestamp Manipulation with Signature Wrapping
- CVE-2021-25633Content Manipulation with Double Certificate Attack
- CVE-2021-25631denylist of executable filename extensions possible to bypass under windows
- CVE-2021-25630"loolforkit" is a privileged program that is supposed to be run by a special, non-privileged "lool" user.
- CVE-2020-12803XForms submissions could overwrite local files
- CVE-2020-12802remote graphics contained in docx format retrieved in 'stealth mode'
- CVE-2020-12801Crash-recovered MSOffice encrypted documents defaulted to not to using encryption on next save