# LibreOffice vulnerabilities Source: https://junglewise.ai/threats/technologies/libreoffice-libreoffice Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/libreoffice-libreoffice.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 8 vulnerabilities in LibreOffice: 0 in the last 7 days and 6 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-76181, was published on 5 November 2026. 1 vulnerability in the last four weeks, down 80% on the four before (5). ## Counts - Last 7 days: 0 - Last 30 days: 1 - Last 90 days: 6 - All time: 8 (0 critical, 0 exploited in the wild) ## About LibreOffice LibreOffice is a free and open-source office productivity suite for word processing, spreadsheets, presentations, and graphics. ## Latest LibreOffice vulnerabilities - [CVE-2026-76181: LibreOffice heap buffer overflow in dBASE index import](https://junglewise.ai/threats/cve-2026-76181-libreoffice-includes-a-dbase-database-driver-which-reads-dbase) (info, published 5 Nov 2026) - [CVE-2026-63270: LibreOffice environment and INI file variable expansion information leak](https://junglewise.ai/threats/cve-2026-63270-urls-could-be-constructed-which-expanded-environment-variable-or) (info, published 5 Oct 2026) - [CVE-2026-63279: LibreOffice out of bounds read in PICT image import](https://junglewise.ai/threats/cve-2026-63279-libreoffice-can-import-pict-images-which-may-be-embedded-in) (info, published 22 Sep 2026) - [CVE-2026-63276: LibreOffice stack buffer overflow in CFF to Type 1 font conversion](https://junglewise.ai/threats/cve-2026-63276-libreoffice-converts-cff-fonts-to-type-1-when-it-subsets-a-font) (info, published 22 Sep 2026) - [CVE-2026-63275: LibreOffice stack buffer overflow in CFF font hint handling](https://junglewise.ai/threats/cve-2026-63275-libreoffice-can-read-cff-fonts-which-may-be-embedded-in-documents) (info, published 22 Sep 2026) - [CVE-2026-63272: LibreOffice heap buffer overflow in WMF text record import](https://junglewise.ai/threats/cve-2026-63272-libreoffice-can-import-wmf-graphics-which-may-be-embedded-in) (info, published 22 Sep 2026) - [CVE-2026-4430: Out-of-bounds write vulnerability in The Document Foundation LibreOffice via crafted OOXML documents with mismatched…](https://junglewise.ai/threats/cve-2026-4430-out-of-bounds-write-vulnerability-in-the-document-foundation) (high, CVSS 7.8, published 7 May 2026) - [CVE-2025-14714: An Authentication Bypass vulnerability existed where the application bundled an interpreter (Python) that inherits the…](https://junglewise.ai/threats/cve-2025-14714-an-authentication-bypass-vulnerability-existed-where-the) (medium, CVSS 6.5, published 15 Dec 2025) ## Most severe LibreOffice vulnerabilities - [CVE-2026-4430: Out-of-bounds write vulnerability in The Document Foundation LibreOffice via crafted OOXML documents with mismatched…](https://junglewise.ai/threats/cve-2026-4430-out-of-bounds-write-vulnerability-in-the-document-foundation) (high, CVSS 7.8, published 7 May 2026) - [CVE-2025-14714: An Authentication Bypass vulnerability existed where the application bundled an interpreter (Python) that inherits the…](https://junglewise.ai/threats/cve-2025-14714-an-authentication-bypass-vulnerability-existed-where-the) (medium, CVSS 6.5, published 15 Dec 2025) - [CVE-2026-63279: LibreOffice out of bounds read in PICT image import](https://junglewise.ai/threats/cve-2026-63279-libreoffice-can-import-pict-images-which-may-be-embedded-in) (info, published 22 Sep 2026) - [CVE-2026-63276: LibreOffice stack buffer overflow in CFF to Type 1 font conversion](https://junglewise.ai/threats/cve-2026-63276-libreoffice-converts-cff-fonts-to-type-1-when-it-subsets-a-font) (info, published 22 Sep 2026) - [CVE-2026-63275: LibreOffice stack buffer overflow in CFF font hint handling](https://junglewise.ai/threats/cve-2026-63275-libreoffice-can-read-cff-fonts-which-may-be-embedded-in-documents) (info, published 22 Sep 2026) - [CVE-2026-63272: LibreOffice heap buffer overflow in WMF text record import](https://junglewise.ai/threats/cve-2026-63272-libreoffice-can-import-wmf-graphics-which-may-be-embedded-in) (info, published 22 Sep 2026) - [CVE-2026-76181: LibreOffice heap buffer overflow in dBASE index import](https://junglewise.ai/threats/cve-2026-76181-libreoffice-includes-a-dbase-database-driver-which-reads-dbase) (info, published 5 Nov 2026) - [CVE-2026-63270: LibreOffice environment and INI file variable expansion information leak](https://junglewise.ai/threats/cve-2026-63270-urls-could-be-constructed-which-expanded-environment-variable-or) (info, published 5 Oct 2026) ## Vulnerabilities per week 1 vulnerability in the last four weeks, down 80% on the four before (5). | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 4 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 1 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 1 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other LibreOffice technologies - [LibreOffice Calc](https://junglewise.ai/threats/technologies/libreoffice-calc-1): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "LibreOffice vulnerabilities", https://junglewise.ai/threats/technologies/libreoffice-libreoffice, 13 November 2026.