CyberSIXT Search
The Document Foundation product

LibreOffice

← All The Document Foundation products

No LibreOffice CVE is in the CISA KEV catalogue.

Tracked since 6 Oct · latest article Tue 6 Oct · RSS

Added to KEV · 90 days
0
of 0 in the full CISA catalogue · all time
High exploit odds · current
0
EPSS top 5%, not in KEV
Articles · 7 days
0
none this week

Exploited, by due date

CSV download

No LibreOffice CVE is in the CISA KEV catalogue.

Coverage

2 articles · all timeFull timeline

Two articles so far, 6 Oct to 6 Oct.

12
  1. LibreOffice Calc Flaw Can Run Java Code When Spreadsheets OpenSecurityOnline
  2. LibreOffice Fixes Spreadsheet Flaw That Could Run Attacker Code on OpenThe Hacker News

All CVEs in coverage

6
CVE-2026-63277RCE via calcext:data-mappings, sql provider and jdbc connectorCVSS8.5High–Not in KEV0.3%EPSS2articles
CVE-2026-63266Arbitrary file write via calcext:data-mappings, sql provider and Firebird backup functionalityCVSS6.8Medium–Not in KEV0.2%EPSS1article
CVE-2026-63268LFI via calcext:data-mappings, sql provider and sdbc:flat:file:// db hrefCVSS6.7Medium–Not in KEV0.1%EPSS1article
CVE-2026-63270Environment/ini-file leaksCVSS6.7Medium–Not in KEV0.1%EPSS1article
CVE-2026-63267LFI and GET SSRF via calcext:data-mappings and csv providerCVSS6.7Medium–Not in KEV0.1%EPSS1article
CVE-2026-63269LFI and GET SSRF via GStreamer and HLS playlistsCVSS6.7Medium–Not in KEV0.1%EPSS1article
How these numbers are made

CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.

CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.

Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.

Product names are grouped by normalised names, with version and edition tails removed.

Fix listed refers to an advisory. Unknown fix status is counted as not listed.

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.
↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device