Skip to content
Critical LibreOffice Vulnerability Allows DoS and Potential Code Execution

Critical LibreOffice Vulnerability Allows DoS and Potential Code Execution

First seen 1 Jun 2026, 22:50 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •June 2, 2026 at 22:40 UTC
  • •LibreOffice vulnerability allows DoS and potential code execution via crafted files.
  • •Affected systems include Ubuntu 26.04 LTS and Ubuntu 25.10.
  • •Users should update to the latest package versions to mitigate the risk.

A significant vulnerability in LibreOffice has been identified, allowing attackers to crash the application or execute arbitrary code by opening specially crafted OOXML documents. Discovered by Duc Anh Nguyen, this flaw arises from the incorrect handling of mismatched encryption salt parameters. Affected systems include Ubuntu 26.04 LTS and Ubuntu 25.10. The vulnerability could lead to a denial of service (DoS) or unauthorized code execution, posing a serious risk to users. Users are advised to update their systems to the latest package versions to mitigate this risk. The update includes additional bug fixes and is part of a new upstream release. Ubuntu Pro offers extended security coverage for affected packages.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 100d ago How this analysis works

Timeline

2026-06-01
USN-8352-1 released
Ubuntu released a security notice addressing a critical LibreOffice vulnerability affecting multiple versions.
Ubuntu
2026-06-01
Vulnerability discovered by Duc Anh Nguyen
The vulnerability was identified due to incorrect handling of encryption salt parameters in OOXML documents.
Linuxsecurity

More articles in this cluster (2)

Following this threat?

Track Ubuntu in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (6)

1 / 3