{"schemaVersion":3,"id":"USN-5661-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"libreoffice vulnerabilities\n\nIt was discovered that LibreOffice incorrectly validated macro signatures.\nIf a user were tricked into opening a specially crafted document, a remote\nattacker could possibly use this issue to execute arbitrary macros.\n(CVE-2022-26305)\n\nIt was discovered that Libreoffice incorrectly handled encrypting the\nmaster key provided by the user for storing passwords for web connections.\nA local attacker could possibly use this issue to obtain access to\npasswords stored in the user's configuration data. (CVE-2022-26306,\nCVE-2022-26307)","dates":{"published":"2022-10-06T13:28:50.000Z","modified":"2026-04-22T10:28:18.883Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"libreoffice","name":"libreoffice","label":"libreoffice","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/libreoffice","purlType":"deb","versions":[{"text":"< 1:6.4.7-0ubuntu0.20.04.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:6.4.7-0ubuntu0.20.04.5","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-5661-1","label":"ubuntu.com/security/notices/USN-5661-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-26305","label":"ubuntu.com/security/CVE-2022-26305","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2022-26306","label":"ubuntu.com/security/CVE-2022-26306","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2022-26307","label":"ubuntu.com/security/CVE-2022-26307","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2022-26305","CVE-2022-26306","CVE-2022-26307"],"downstream":[],"duplicates":[],"related":["CVE-2022-26305","CVE-2022-26306","CVE-2022-26307"]},"timeline":[{"kind":"published","date":"2022-10-06T13:28:50.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-04-22T10:28:18.883Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T18:16:38.526Z","stale":false,"partial":false}}