https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T23:38:41.626857+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2020:4628 ALSA-2020:4628 — Low: libreoffice security, bug fix, and enhancement update 2026-10-03T23:38:41.936574+00:00

Affected: AlmaLinux:8: libcmis, AlmaLinux:8: libreoffice-sdk, AlmaLinux:8: libreoffice-sdk-doc

LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite.

The following packages have been upgraded to a later upstream version: libreoffice (6.3.6.2), libcmis (0.5.2), liborcus (0.14.1). (BZ#1796893)

Security Fix(es):

* libreoffice: 'stealth mode' remote resource restrictions bypass (CVE-2020-12802)

* libreoffice: forms allowed to be submitted to any URI could result in local file overwrite (CVE-2020-12803)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2020-03672 bdu:2020-03672 2026-10-03T23:38:41.936758+00:00 bdu:2020-03672 https://cve.radiocsirt.org/vuln/certfr-2020-avi-347 certfr-2020-avi-347 — Une vulnérabilité a été découverte dans LibreOffice. Elle permet à un attaquant de provoquer une atteinte à la confiden… 2026-10-03T23:38:41.936791+00:00 certfr-2020-avi-347 https://cve.radiocsirt.org/vuln/cnvd-2020-35942 cnvd-2020-35942 2026-10-03T23:38:41.936819+00:00 cnvd-2020-35942 https://cve.radiocsirt.org/vuln/euvd-2026-185153 EUVD-2026-185153 2026-10-03T23:38:41.936842+00:00 EUVD-2026-185153 https://cve.radiocsirt.org/vuln/fkie_cve-2020-12802 fkie_cve-2020-12802 2026-10-03T23:38:41.936863+00:00

LibreOffice has a 'stealth mode' in which only documents from locations deemed 'trusted' are allowed to retrieve remote resources. This mode is not the default mode, but can be enabled by users who want to disable LibreOffice's ability to include remote resources within a document. A flaw existed where remote graphic links loaded from docx documents were omitted from this protection prior to version 6.4.4. This issue affects: The Document Foundation LibreOffice versions prior to 6.4.4.

 https://cve.radiocsirt.org/vuln/ghsa-r3c7-2c6p-8qmc GHSA-r3c7-2c6p-8qmc 2026-10-03T23:38:41.936920+00:00

LibreOffice has a 'stealth mode' in which only documents from locations deemed 'trusted' are allowed to retrieve remote resources. This mode is not the default mode, but can be enabled by users who want to disable LibreOffice's ability to include remote resources within a document. A flaw existed where remote graphic links loaded from docx documents were omitted from this protection prior to version 6.4.4. This issue affects: The Document Foundation LibreOffice versions prior to 6.4.4.

 https://cve.radiocsirt.org/vuln/gsd-2020-12802 gsd-2020-12802 2026-10-03T23:38:41.936963+00:00 gsd-2020-12802 https://cve.radiocsirt.org/vuln/opensuse-su-2020:1222-1 openSUSE-SU-2020:1222-1 — Security update for libreoffice 2026-10-03T23:38:41.936976+00:00

Security update for libreoffice

 https://cve.radiocsirt.org/vuln/rhsa-2020:4628 RHSA-2020:4628 — Red Hat Security Advisory: libreoffice security, bug fix, and enhancement update 2026-10-03T23:38:41.937013+00:00

libreoffice: 'stealth mode' remote resource restrictions bypass libreoffice: forms allowed to be submitted to any URI could result in local file overwrite

 https://cve.radiocsirt.org/vuln/suse-su-2020:2217-1 SUSE-SU-2020:2217-1 — Security update for libreoffice 2026-10-03T23:38:41.937052+00:00

Security update for libreoffice

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-12802 UBUNTU-CVE-2020-12802 2026-10-03T23:38:41.937085+00:00

Affected: Ubuntu:20.04:LTS: libreoffice

LibreOffice has a 'stealth mode' in which only documents from locations deemed 'trusted' are allowed to retrieve remote resources. This mode is not the default mode, but can be enabled by users who want to disable LibreOffice's ability to include remote resources within a document. A flaw existed where remote graphic links loaded from docx documents were omitted from this protection prior to version 6.4.4. This issue affects: The Document Foundation LibreOffice versions prior to 6.4.4.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1808 WID-SEC-W-2022-1808 — LibreOffice: Mehrere Schwachstellen 2026-10-03T23:38:41.937124+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in LibreOffice ausnutzen, um Sicherheitsvorkehrungen zu umgehen und um Dateien zu überschreiben.