{"schemaVersion":3,"id":"USN-5694-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"libreoffice vulnerabilities\n\nIt was discovered that LibreOffice incorrectly handled links using the\nOffice URI Schemes. If a user were tricked into opening a specially\ncrafted document, a remote attacker could use this issue to execute\narbitrary scripts. (CVE-2022-3140)\n\nThomas Florian discovered that LibreOffice incorrectly handled crashes when\nan encrypted document is open. If the document is recovered upon restarting\nLibreOffice, subsequent saves of the document were unencrypted. This issue\nonly affected Ubuntu 18.04 LTS. (CVE-2020-12801)\n\nJens Müller discovered that LibreOffice incorrectly handled certain\ndocuments containing forms. If a user were tricked into opening a specially\ncrafted document, a remote attacker could overwrite arbitrary files when\nthe form was submitted. This issue only affected Ubuntu 18.04 LTS.\n(CVE-2020-12803)\n\nIt was discovered that LibreOffice incorrectly validated macro signatures.\nIf a user were tricked into opening a specially crafted document, a remote\nattacker could possibly use this issue to execute arbitrary macros. This\nissue only affected Ubuntu 18.04 LTS. (CVE-2022-26305)\n\nIt was discovered that Libreoffice incorrectly handled encrypting the\nmaster key provided by the user for storing passwords for web connections.\nA local attacker could possibly use this issue to obtain access to\npasswords stored in the user’s configuration data. This issue only affected\nUbuntu 18.04 LTS. (CVE-2022-26306, CVE-2022-26307)","dates":{"published":"2022-10-20T12:52:30.000Z","modified":"2026-04-22T10:15:42.988Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"libreoffice","name":"libreoffice","label":"libreoffice","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/libreoffice","purlType":"deb","versions":[{"text":"< 1:6.0.7-0ubuntu0.18.04.12","noFixRecorded":false,"fixedIn":null},{"text":"< 1:6.4.7-0ubuntu0.20.04.6","noFixRecorded":false,"fixedIn":null},{"text":"< 1:7.3.6-0ubuntu0.22.04.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:6.0.7-0ubuntu0.18.04.12 | < 1:6.4.7-0ubuntu0.20.04.6 | < 1:7.3.6-0ubuntu0.22.04.2","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-5694-1","label":"ubuntu.com/security/notices/USN-5694-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-12801","label":"ubuntu.com/security/CVE-2020-12801","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2020-12803","label":"ubuntu.com/security/CVE-2020-12803","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2022-3140","label":"ubuntu.com/security/CVE-2022-3140","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2022-26305","label":"ubuntu.com/security/CVE-2022-26305","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2022-26306","label":"ubuntu.com/security/CVE-2022-26306","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2022-26307","label":"ubuntu.com/security/CVE-2022-26307","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2020-12801","CVE-2020-12803","CVE-2022-26305","CVE-2022-26306","CVE-2022-26307","CVE-2022-3140"],"downstream":[],"duplicates":[],"related":["CVE-2020-12801","CVE-2020-12803","CVE-2022-26305","CVE-2022-26306","CVE-2022-26307","CVE-2022-3140"]},"timeline":[{"kind":"published","date":"2022-10-20T12:52:30.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-04-22T10:15:42.988Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T06:50:35.702Z","stale":false,"partial":false}}