8.3
Élevée
CVE-2023-6186 Insufficient macro permission validation of The Document Foundation LibreOffice allows an attacker to execute built-in…
Description
Insufficient macro permission validation of The Document Foundation LibreOffice allows an attacker to execute built-in macros without warning. In affected versions LibreOffice supports hyperlinks with macro or similar built-in command targets that can be executed when activated without warning the user.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| LibreOffice 7.6 | 7.6 → < 7.6.4 | 7.6.4 |
| LibreOffice 7.5 | 7.5 → < 7.5.9 | 7.5.9 |
Autres CVE de LibreOffice
Les 48 CVE de LibreOffice →
CVE-2026-76181
Heap buffer overflow in dBASE index import
5.4
Moyenne
CVE-2026-63270
URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information…
6.7
Moyenne
CVE-2026-63269
LibreOffice can link to audio and video files from a document, and on Linux it plays them with GStreamer
6.7
Moyenne
CVE-2026-63267
LibreOffice Calc can link a cell range to an external csv data source, and the link is saved in the document
6.7
Moyenne