Vulnerability in Libreoffice
CVE-2023-6186
Insufficient macro permission validation of The Document Foundation LibreOffice allows an attacker to execute built-in macros without warning. In affected versions LibreOffice supports hyperlinks with macro or similar built-in command tar…
EPSS: 0.008 (51.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.3 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:H.
Affected products
- Libreoffice
- The Document Foundation Libreoffice — versions 7.5, 7.6
- Debian Debian_linux — versions 11.0, 12.0
- Fedoraproject Fedora — versions 38
Weakness classification (CWE)
References
- security@documentfoundation.org (vendor-advisory, Vendor Advisory)
- security@documentfoundation.org (Third Party Advisory)
- security@documentfoundation.org (Mailing List, Third Party Advisory)
- security@documentfoundation.org
Frequently asked questions
- What is CVE-2023-6186?
- CVE-2023-6186 is a high-severity vulnerability in Libreoffice, classified under Improper Preservation of Permissions. CVSS score: 8.3/10. Published 2023-12-11.
- How severe is CVE-2023-6186?
- High severity. CVSS v3 base score is 8.3 out of 10.