# LibreOffice vulnerabilities Source: https://junglewise.ai/threats/vendors/libreoffice Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/libreoffice.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 13 vulnerabilities in LibreOffice: 0 in the last 7 days and 11 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-76181, was published on 5 November 2026. 1 vulnerability in the last four weeks, down 90% on the four before (10). 2 technologies have a page of their own. ## Counts - Last 7 days: 0 - Last 30 days: 1 - Last 90 days: 11 - All time: 13 (0 critical, 0 exploited in the wild) ## About LibreOffice Open-source office suite for word processing, spreadsheets, presentations, and other document formats. ## Latest LibreOffice vulnerabilities - [CVE-2026-76181: LibreOffice heap buffer overflow in dBASE index import](https://junglewise.ai/threats/cve-2026-76181-libreoffice-includes-a-dbase-database-driver-which-reads-dbase) (info, published 5 Nov 2026) - [CVE-2026-63277: LibreOffice Calc remote code execution via SQL provider and JDBC connector](https://junglewise.ai/threats/cve-2026-63277-libreoffice-calc-can-link-a-cell-range-to-an-external-data-source) (info, published 5 Oct 2026) - [CVE-2026-63270: LibreOffice environment and INI file variable expansion information leak](https://junglewise.ai/threats/cve-2026-63270-urls-could-be-constructed-which-expanded-environment-variable-or) (info, published 5 Oct 2026) - [CVE-2026-63267: LibreOffice Calc external CSV data link LFI and SSRF](https://junglewise.ai/threats/cve-2026-63267-libreoffice-calc-can-link-a-cell-range-to-an-external-csv-data) (info, published 5 Oct 2026) - [CVE-2026-63266: LibreOffice Calc arbitrary file write via Firebird backup functionality](https://junglewise.ai/threats/cve-2026-63266-libreoffice-calc-can-link-a-cell-range-to-an-external-data-source) (info, published 5 Oct 2026) - [CVE-2026-63279: LibreOffice out of bounds read in PICT image import](https://junglewise.ai/threats/cve-2026-63279-libreoffice-can-import-pict-images-which-may-be-embedded-in) (info, published 22 Sep 2026) - [CVE-2026-63276: LibreOffice stack buffer overflow in CFF to Type 1 font conversion](https://junglewise.ai/threats/cve-2026-63276-libreoffice-converts-cff-fonts-to-type-1-when-it-subsets-a-font) (info, published 22 Sep 2026) - [CVE-2026-63275: LibreOffice stack buffer overflow in CFF font hint handling](https://junglewise.ai/threats/cve-2026-63275-libreoffice-can-read-cff-fonts-which-may-be-embedded-in-documents) (info, published 22 Sep 2026) - [CVE-2026-63274: LibreOffice Draw heap buffer overflow in PDF stream import](https://junglewise.ai/threats/cve-2026-63274-libreoffice-draw-can-import-pdf-documents-a-heap-buffer-overflow) (info, published 22 Sep 2026) - [CVE-2026-63273: LibreOffice Draw heap buffer overflow in PDF import encryption handling](https://junglewise.ai/threats/cve-2026-63273-libreoffice-draw-can-import-pdf-documents-a-heap-buffer-overflow) (info, published 22 Sep 2026) - [CVE-2026-63272: LibreOffice heap buffer overflow in WMF text record import](https://junglewise.ai/threats/cve-2026-63272-libreoffice-can-import-wmf-graphics-which-may-be-embedded-in) (info, published 22 Sep 2026) - [CVE-2026-4430: Out-of-bounds write vulnerability in The Document Foundation LibreOffice via crafted OOXML documents with mismatched…](https://junglewise.ai/threats/cve-2026-4430-out-of-bounds-write-vulnerability-in-the-document-foundation) (high, CVSS 7.8, published 7 May 2026) - [CVE-2025-14714: An Authentication Bypass vulnerability existed where the application bundled an interpreter (Python) that inherits the…](https://junglewise.ai/threats/cve-2025-14714-an-authentication-bypass-vulnerability-existed-where-the) (medium, CVSS 6.5, published 15 Dec 2025) ## Most severe LibreOffice vulnerabilities - [CVE-2026-4430: Out-of-bounds write vulnerability in The Document Foundation LibreOffice via crafted OOXML documents with mismatched…](https://junglewise.ai/threats/cve-2026-4430-out-of-bounds-write-vulnerability-in-the-document-foundation) (high, CVSS 7.8, published 7 May 2026) - [CVE-2025-14714: An Authentication Bypass vulnerability existed where the application bundled an interpreter (Python) that inherits the…](https://junglewise.ai/threats/cve-2025-14714-an-authentication-bypass-vulnerability-existed-where-the) (medium, CVSS 6.5, published 15 Dec 2025) - [CVE-2026-63279: LibreOffice out of bounds read in PICT image import](https://junglewise.ai/threats/cve-2026-63279-libreoffice-can-import-pict-images-which-may-be-embedded-in) (info, published 22 Sep 2026) - [CVE-2026-63276: LibreOffice stack buffer overflow in CFF to Type 1 font conversion](https://junglewise.ai/threats/cve-2026-63276-libreoffice-converts-cff-fonts-to-type-1-when-it-subsets-a-font) (info, published 22 Sep 2026) - [CVE-2026-63275: LibreOffice stack buffer overflow in CFF font hint handling](https://junglewise.ai/threats/cve-2026-63275-libreoffice-can-read-cff-fonts-which-may-be-embedded-in-documents) (info, published 22 Sep 2026) - [CVE-2026-63274: LibreOffice Draw heap buffer overflow in PDF stream import](https://junglewise.ai/threats/cve-2026-63274-libreoffice-draw-can-import-pdf-documents-a-heap-buffer-overflow) (info, published 22 Sep 2026) - [CVE-2026-63272: LibreOffice heap buffer overflow in WMF text record import](https://junglewise.ai/threats/cve-2026-63272-libreoffice-can-import-wmf-graphics-which-may-be-embedded-in) (info, published 22 Sep 2026) - [CVE-2026-63273: LibreOffice Draw heap buffer overflow in PDF import encryption handling](https://junglewise.ai/threats/cve-2026-63273-libreoffice-draw-can-import-pdf-documents-a-heap-buffer-overflow) (info, published 22 Sep 2026) - [CVE-2026-76181: LibreOffice heap buffer overflow in dBASE index import](https://junglewise.ai/threats/cve-2026-76181-libreoffice-includes-a-dbase-database-driver-which-reads-dbase) (info, published 5 Nov 2026) - [CVE-2026-63277: LibreOffice Calc remote code execution via SQL provider and JDBC connector](https://junglewise.ai/threats/cve-2026-63277-libreoffice-calc-can-link-a-cell-range-to-an-external-data-source) (info, published 5 Oct 2026) ## Vulnerabilities per week 1 vulnerability in the last four weeks, down 90% on the four before (10). | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 6 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 4 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 1 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## LibreOffice technologies - [LibreOffice](https://junglewise.ai/threats/technologies/libreoffice-libreoffice): 8 vulnerabilities - [LibreOffice Calc](https://junglewise.ai/threats/technologies/libreoffice-calc-1): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "LibreOffice vulnerabilities", https://junglewise.ai/threats/vendors/libreoffice, 13 November 2026.