[ Vendor · 6 CVEs ]
The Document Foundation
CVEs affecting The Document Foundation published in the last 30 days, plus any The Document Foundation CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-63270 | 5 Oct 2026 | CVSS 6.7 | The Document Foundation LibreOfficeURLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information could be exfiltrated to a… | |
| CVE-2026-63277 | 5 Oct 2026 | CVSS 8.5 | The Document Foundation LibreOfficeLibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A document could name a Java database… | Fix |
| CVE-2026-63266 | 5 Oct 2026 | CVSS 6.8 | The Document Foundation LibreOfficeLibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. Through such a link a document could open… | |
| CVE-2026-63267 | 5 Oct 2026 | CVSS 6.7 | The Document Foundation LibreOfficeLibreOffice Calc can link a cell range to an external csv data source, and the link is saved in the document. Such a link was fetched while the… | |
| CVE-2026-63268 | 5 Oct 2026 | CVSS 6.7 | The Document Foundation LibreOfficeLibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A link of the sql type could name a folder… | |
| CVE-2026-63269 | 5 Oct 2026 | CVSS 6.7 | The Document Foundation LibreOfficeLibreOffice can link to audio and video files from a document, and on Linux it plays them with GStreamer. A linked media file could be an HLS… |