https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T11:29:54.253323+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2025:2868 ALSA-2025:2868 — Important: libreoffice security update 2026-10-04T11:29:54.513512+00:00

Affected: AlmaLinux:8: autocorr-af, AlmaLinux:8: autocorr-bg, AlmaLinux:8: autocorr-ca, AlmaLinux:8: autocorr-cs, AlmaLinux:8: autocorr-da, AlmaLinux:8: autocorr-de, AlmaLinux:8: autocorr-en, AlmaLinux:8: autocorr-es, AlmaLinux:8: autocorr-fa, AlmaLinux:8: autocorr-fi and 162 more

LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite.

Security Fix(es):

* libreoffice: Macro URL arbitrary script execution (CVE-2025-1080)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2025-04329 bdu:2025-04329 2026-10-04T11:29:54.513767+00:00 bdu:2025-04329 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0175 certfr-2025-avi-0175 — Une vulnérabilité a été découverte dans LibreOffice. Elle permet à un attaquant de provoquer un contournement de la pol… 2026-10-04T11:29:54.513789+00:00 certfr-2025-avi-0175 https://cve.radiocsirt.org/vuln/euvd-2026-257788 EUVD-2026-257788 2026-10-04T11:29:54.513805+00:00 EUVD-2026-257788 https://cve.radiocsirt.org/vuln/fkie_cve-2025-1080 fkie_cve-2025-1080 2026-10-04T11:29:54.513817+00:00

LibreOffice supports Office URI Schemes to enable browser integration of LibreOffice with MS SharePoint server. An additional scheme 'vnd.libreoffice.command' specific to LibreOffice was added. In the affected versions of LibreOffice a link in a browser using that scheme could be constructed with an embedded inner URL that when passed to LibreOffice could call internal macros with arbitrary arguments. This issue affects LibreOffice: from 24.8 before < 24.8.5, from 25.2 before < 25.2.1.

 https://cve.radiocsirt.org/vuln/ghsa-gcgr-r4x5-w79r GHSA-gcgr-r4x5-w79r 2026-10-04T11:29:54.513843+00:00

LibreOffice supports Office URI Schemes to enable browser integration of LibreOffice with MS SharePoint server. An additional scheme 'vnd.libreoffice.command' specific to LibreOffice was added. In the affected versions of LibreOffice a link in a browser using that scheme could be constructed with an embedded inner URL that when passed to LibreOffice could call internal macros with arbitrary arguments. This issue affects LibreOffice: from 24.8 before < 24.8.5, from 25.2 before < 25.2.1.

 https://cve.radiocsirt.org/vuln/rhsa-2025:2868 RHSA-2025:2868 — Red Hat Security Advisory: libreoffice security update 2026-10-04T11:29:54.513860+00:00

libreoffice: Macro URL arbitrary script execution

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-1080 UBUNTU-CVE-2025-1080 2026-10-04T11:29:54.513877+00:00

Affected: Ubuntu:20.04:LTS: libreoffice, Ubuntu:22.04:LTS: libreoffice, Ubuntu:24.04:LTS: libreoffice

LibreOffice supports Office URI Schemes to enable browser integration of LibreOffice with MS SharePoint server. An additional scheme 'vnd.libreoffice.command' specific to LibreOffice was added. In the affected versions of LibreOffice a link in a browser using that scheme could be constructed with an embedded inner URL that when passed to LibreOffice could call internal macros with arbitrary arguments. This issue affects LibreOffice: from 24.8 before < 24.8.5, from 25.2 before < 25.2.1.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0483 WID-SEC-W-2025-0483 — LibreOffice: Schwachstelle ermöglicht Codeausführung 2026-10-04T11:29:54.513903+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in LibreOffice ausnutzen, um beliebigen Programmcode auszuführen.