6.7

CVE-2026-63270: the document foundation libreoffice

CVSS: 6.7v4.0MediumDeferred
AliasesUBUNTU-CVE-2026-63270DEBIAN-CVE-2026-63270
Published 05-10-2026Last modified 05-10-2026
Open JSON

Vulnerability summary

CVE-2026-63270 is a medium (CVSS 6.7) vulnerability in the document foundation libreoffice. EPSS estimates a 0.12% chance of exploitation in the next 30 days, higher than 1.5% of scored vulnerabilities.

Overall risk
27/100
0100
Medium · default modelHow is this calculated?
CVSS score
6.7/10
010
Medium · v4.0 (CVE.org)
EPSS score
0.12%
0%100%
Low · Change unavailable
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 1
MGASA-2026-0514

Timeline

  1. 05-10-2026
    PublishedVulnerability first disclosed.
  2. 05-10-2026
    Last modifiedVulnerability information updated.

Description

URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information could be exfiltrated to a remote server on opening a document containing such links. The check added for CVE-2024-12426 did not cover every place a document can supply a URL. XForms instance data and the Calc csv and sql data providers still reached the expansion. In fixed versions these places refuse URLs with internal schemes when the URL comes from the document.

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

0.12%

Chance of exploitation in the next 30 days

Percentile

2%

Versus all other CVEs

30-day change

Change unavailable

Change unavailable

06-10-202620-10-2026
EPSS score
0.12%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Debian1 product
  • libreofficeAll versions (No fix recorded) | < 4:25.2.3-2+deb13u8 | < 4:26.2.5.2-1
The document foundation1 product
Ubuntu1 product
  • libreofficeAll versions (No fix recorded)

3 vendors · 3 products

References

5 links