Sploitus

31 exploited vulnerabilities in Libreoffice

Vulnerabilities with publicly known exploits

Vendors
Alt Linux, Centos, Document Foundation, Red Hat, Suse, Canonical
With known exploits
31
Affected Libreoffice versions
< 6.2.7, 6.3.1, 6.2.5, 6.0.7, 6.1.3, 5.4.5, 6.0.0, 6.2.6, 7.5.9, 7.6.3, 7.6.4, 7.4.6, 7.5.2, 6.0.3, 7.5.0, 7.4.7, 7.5.3
Affected Pipeshub versions
= 0.1.0, 0.1.2, 0.1.3
Affected Stirlingpdf Stirling Pdf versions
< 1.1.0
Affected Thecodingmachine Gotenberg versions
≤ 6.2.1, 8.32.0
Affected Canonical Ubuntu Linux versions
= 16.04, 18.04, 19.04
Affected Debian Debian Linux versions
= 8.0, 9.0, 10.0, 7.0
Affected Fedoraproject Fedora versions
= 29, 30
Affected Opensuse Leap versions
= 15.0, 15.1

Vulnerabilities with exploits

Highest CVSS first — 11 of these already have exploit code on Sploitus

CVE-2019-9854
CVSS 10.0 HIGH 2019-09-06FIX AVAILABLE
CVE-2019-9849
CVSS 10.0 HIGH 2019-07-16FIX AVAILABLE
CVE-2019-9848 5 exploits
CVSS 10.0 CRITICAL 2019-07-16FIX AVAILABLE
LibreOffice < 6.2.6 Macro - Python Code Execution ExploitLibreOffice 6.2.6 Macro - Python Code Execution (Metasploit)
CVE-2025-67506
CVSS 9.8 CRITICAL 2025-12-10FIX AVAILABLE
CVE-2025-55151
CVSS 9.8 CRITICAL 2025-08-11FIX AVAILABLE
CVE-2020-13451 1 exploit
CVSS 9.8 CRITICAL 2021-01-07FIX AVAILABLE
Gotenberg 6.2.0 Traversal / Code Execution / Insecure Permissions
CVE-2019-9851 5 exploits
CVSS 9.8 CRITICAL 2019-08-06FIX AVAILABLE
LibreOffice < 6.2.6 Macro - Python Code Execution ExploitLibreOffice 6.2.6 Macro - Python Code Execution (Metasploit)
CVE-2019-9850
CVSS 9.8 CRITICAL 2019-08-06FIX AVAILABLE
CVE-2018-16858 9 exploits
CVSS 9.8 CRITICAL 2018-10-09FIX AVAILABLE
LibreOffice < 6.2.6 Macro - Python Code Execution ExploitLibreOffice 6.2.6 Macro - Python Code Execution (Metasploit)
CVE-2018-6871 4 exploits
CVSS 9.8 CRITICAL 2018-02-09FIX AVAILABLE
LibreOffice < 6.0.1 - =WEBSERVICE Remote Arbitrary File Disclosure VulnerabilityLibreOffice 6.0.1 - WEBSERVICE Remote Arbitrary File Disclosure
CVE-2021-25631
CVSS 9.3 HIGH 2021-03-30FIX AVAILABLE
CVE-2019-9853 1 exploit
CVSS 9.3 HIGH 2019-08-15FIX AVAILABLE
Open-Xchange App Suite / Documents Server-Side Request Forgery
CVE-2019-9852
CVSS 9.3 HIGH 2019-08-06FIX AVAILABLE
CVE-2012-2334 1 exploit
CVSS 9.3 HIGH 2012-06-04FIX AVAILABLE
OpenOffice 3.4之前版本 filter/source/msfilter msdffimp.cxx拒绝服务漏洞
CVE-2023-6185
CVSS 8.8 HIGH 2023-12-11
CVE-2023-6186
CVSS 8.8 HIGH 2023-12-11
CVE-2026-42591
CVSS 8.2 HIGH 2026-05-07FIX AVAILABLE
CVE-2023-0950
CVSS 7.8 HIGH 2023-05-24FIX AVAILABLE
CVE-2018-10119
CVSS 7.8 HIGH 2018-02-22FIX AVAILABLE
CVE-2018-10120
CVSS 7.8 HIGH 2018-04-15FIX AVAILABLE
CVE-2012-5639
CVSS 7.6 HIGH 2019-12-20
CVE-2026-55229
CVSS 7.5 HIGH 2026-06-18
CVE-2023-49782
CVSS 7.5 HIGH 2023-12-04FIX AVAILABLE
CVE-2020-27603 1 exploit
CVSS 7.5 HIGH 2020-10-21FIX AVAILABLE
Exploit for CVE-2020-27603
CVE-2018-10583 6 exploits
CVSS 7.5 HIGH 2018-05-01FIX AVAILABLE
LibreOffice 6.03 /Apache OpenOffice 4.1.5 Malicious ODT File GeneratorBigBlueButton 2.2.25 File Disclosure / Server-Side Request Forgery
CVE-2023-48314
CVSS 7.1 HIGH 2023-12-01FIX AVAILABLE
CVE-2020-27604
CVSS 6.5 MEDIUM 2020-10-21FIX AVAILABLE
CVE-2023-1183
CVSS 5.5 MEDIUM 2023-06-19
CVE-2026-23623
CVSS 5.3 MEDIUM 2026-02-05FIX AVAILABLE
CVE-2023-2255 2 exploits
CVSS 5.3 MEDIUM 2023-05-24FIX AVAILABLE
Exploit for Improper Input Validation in MicrosoftExploit for CVE-2023-2255
CVE-2012-0037 1 exploit
CVSS 4.3 MEDIUM 2012-03-22FIX AVAILABLE
OpenOffice ODF文档信息泄露漏洞