Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

The Document Foundation Security Vulnerabilities | CyStack CVE Database

Vulnerability	Exploitation status	Fix	Affected product	Published	Severity

`CVE-2026-8358`Heap buffer overflow in spreadsheet tracked-changes import	Exploitation statusNot known exploited	FixYes	Affected productLibreOffice	Published06/15/2026	SeverityMedium
`CVE-2026-8357`Heap buffer overflow in Calc formula compilation	Exploitation statusNot known exploited	FixYes	Affected productLibreOffice	Published06/15/2026	SeverityMedium
`CVE-2026-8356`Stack buffer overflow in PPT presentation import	Exploitation statusNot known exploited	FixYes	Affected productLibreOffice	Published06/15/2026	SeverityMedium
`CVE-2026-6047`Heap buffer overflow in OOXML text box element import	Exploitation statusNot known exploited	FixYes	Affected productLibreOffice	Published06/15/2026	SeverityMedium
`CVE-2026-6045`Heap buffer overflow in EMF+ gradient brush import	Exploitation statusNot known exploited	FixYes	Affected productLibreOffice	Published06/15/2026	SeverityMedium
`CVE-2026-6040`Heap use-after-free in ODF number-format blank-width parsing	Exploitation statusNot known exploited	FixYes	Affected productLibreOffice	Published06/15/2026	SeverityMedium
`CVE-2026-6039`Heap buffer overflow in DXF polyline import	Exploitation statusNot known exploited	FixYes	Affected productLibreOffice	Published06/15/2026	SeverityMedium
`CVE-2026-4430`Heap Buffer Overflow in AgileEngine	Exploitation statusNot known exploited	FixYes	Affected productLibreOffice	Published05/07/2026	SeverityMedium
`CVE-2025-14714`TCC Bypass via Inherited Permissions in Bundled Interpreter	Exploitation statusNot known exploited	FixYes	Affected productLibreOffice	Published12/15/2025	SeverityLow
`CVE-2025-2866`PDF signature forgery with adbe.pkcs7.sha1 SubFilter	Exploitation statusNot known exploited	FixYes	Affected productLibreOffice	Published04/27/2025	SeverityLow
`CVE-2021-25635`Content Manipulation with Certificate Validation Attack	Exploitation statusNot known exploited	FixYes	Affected productLibreOffice	Published03/21/2025	SeverityMedium
`CVE-2025-1080`Macro URL arbitrary script execution	Exploitation statusNot known exploited	FixYes	Affected productLibreOffice	Published03/04/2025	SeverityHigh
`CVE-2025-0514`Executable hyperlink Windows path targets executed unconditionally on activation	Exploitation statusNot known exploited	FixYes	Affected productLibreOffice	Published02/25/2025	SeverityHigh
`CVE-2024-12426`URL fetching can be used to exfiltrate arbitrary INI file values and environment variables	Exploitation statusNot known exploited	FixYes	Affected productLibreOffice	Published01/07/2025	SeverityMedium
`CVE-2024-12425`Path traversal leading to arbitrary .ttf file write	Exploitation statusNot known exploited	FixYes	Affected productLibreOffice	Published01/07/2025	SeverityLow
`CVE-2024-7788`Signatures in "repair mode" should not be trusted	Exploitation statusNot known exploited	FixYes	Affected productLibreOffice	Published09/17/2024	SeverityHigh
`CVE-2024-6472`Ability to trust not validated macro signatures removed in high security mode	Exploitation statusNot known exploited	FixYes	Affected productLibreOffice	Published08/05/2024	SeverityHigh
`CVE-2024-5261`TLS certificate are not properly verified when utilizing LibreOfficeKit	Exploitation statusNot known exploited	FixYes	Affected productLibreOffice	Published06/25/2024	SeverityCritical
`CVE-2024-3044`Graphic on-click binding allows unchecked script execution	Exploitation statusNot known exploited	FixYes	Affected productLibreOffice	Published05/14/2024	SeverityMedium
`CVE-2023-6186`Link targets allow arbitrary script execution	Exploitation statusNot confirmed	FixYes	Affected productLibreOffice	Published12/11/2023	SeverityHigh
`CVE-2023-6185`Improper input validation enabling arbitrary Gstreamer pipeline injection	Exploitation statusNot known exploited	FixYes	Affected productLibreOffice	Published12/11/2023	SeverityHigh
`CVE-2023-0950`Array Index UnderFlow in Calc Formula Parsing	Exploitation statusNot known exploited	FixYes	Affected productLibreOffice	Published05/25/2023	SeverityHigh
`CVE-2023-2255`Remote documents loaded without prompt via IFrame	Exploitation statusNot confirmed	FixYes	Affected productLibreOffice	Published05/25/2023	SeverityUnknown
`CVE-2022-3140`Macro URL arbitrary script execution	Exploitation statusNot confirmed	FixYes	Affected productLibreOffice	Published10/11/2022	SeverityUnknown
`CVE-2022-26307`Weak Master Keys	Exploitation statusNot confirmed	FixYes	Affected productLibreOffice	Published07/25/2022	SeverityUnknown
`CVE-2022-26305`Execution of Untrusted Macros Due to Improper Certificate Validation	Exploitation statusNot confirmed	FixYes	Affected productLibreOffice	Published07/25/2022	SeverityUnknown
`CVE-2022-26306`Execution of Untrusted Macros Due to Improper Certificate Validation	Exploitation statusNot confirmed	FixYes	Affected productLibreOffice	Published07/25/2022	SeverityUnknown
`CVE-2021-25636`Incorrect trust validation of signature with ambiguous KeyInfo children	Exploitation statusNot confirmed	FixYes	Affected productLibreOffice	Published02/22/2022	SeverityUnknown
`CVE-2021-25634`Timestamp Manipulation with Signature Wrapping	Exploitation statusNot confirmed	FixYes	Affected productLibreOffice	Published10/12/2021	SeverityUnknown
`CVE-2021-25633`Content Manipulation with Double Certificate Attack	Exploitation statusNot confirmed	FixYes	Affected productLibreOffice	Published10/11/2021	SeverityUnknown
`CVE-2021-25631`denylist of executable filename extensions possible to bypass under windows	Exploitation statusNot confirmed	FixYes	Affected productLibreOffice	Published05/03/2021	SeverityUnknown
`CVE-2021-25630`	Exploitation statusNot confirmed	FixYes	Affected productLibreOffice Online	Published02/23/2021	SeverityUnknown
`CVE-2020-12803`XForms submissions could overwrite local files	Exploitation statusNot confirmed	FixYes	Affected productLibreOffice	Published06/08/2020	SeverityUnknown
`CVE-2020-12802`remote graphics contained in docx format retrieved in 'stealth mode'	Exploitation statusNot confirmed	FixYes	Affected productLibreOffice	Published06/08/2020	SeverityUnknown
`CVE-2020-12801`Crash-recovered MSOffice encrypted documents defaulted to not to using encryption on next save	Exploitation statusNot known exploited	FixYes	Affected productLibreOffice	Published05/18/2020	SeverityUnknown

35 / 35 Results

All vulnerabilities loaded

Security vulnerabilities from The Document Foundation

The Document Foundation

Filters

Run an in-depth assessment with complete web risk management

Popular The Document Foundation products

LibreOffice

LibreOffice Online