Multiple vulnerabilities in LibreOffice

Popis

Multiple vulnerabilities were found in LibreOffice. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code.

Below is a complete list of vulnerabilities:

1. Security vulnerability can be exploited to bypass security restrictions.
2. Remote code execution vulnerability can be exploited remotely to execute arbitrary code.

Oficiální doporučení

• Execution of Untrusted Macros Due to Improper Certificate Validation

• Static Initialization Vector Allows to Recover Passwords for Web Connections Without Knowing the Master Password
• Weak Master Keys

Vykořisťování

Public exploits exist for this vulnerability.

Související produkty

• LibreOffice

seznam CVE

• CVE-2022-26306
  critical
• CVE-2022-26307
  critical
• CVE-2022-26305
  critical

Zobrazit více

Zjistěte statistiky zranitelností šířících se ve vaší oblasti statistics.securelist.com