Critical LibreOffice Vulnerability Allows DoS and Potential Code Execution

Linuxsecurity

Critical LibreOffice Vulnerability Allows DoS and Potential Code Execution

First seen 1 Jun 2026, 22:50 UTC • •72.0

Article Content

1 / 3

Browse articles

ThreatCluster •June 2, 2026 at 22:40 UTC

•LibreOffice vulnerability allows DoS and potential code execution via crafted files.
•Affected systems include Ubuntu 26.04 LTS and Ubuntu 25.10.
•Users should update to the latest package versions to mitigate the risk.

A significant vulnerability in LibreOffice has been identified, allowing attackers to crash the application or execute arbitrary code by opening specially crafted OOXML documents. Discovered by Duc Anh Nguyen, this flaw arises from the incorrect handling of mismatched encryption salt parameters. Affected systems include Ubuntu 26.04 LTS and Ubuntu 25.10. The vulnerability could lead to a denial of service (DoS) or unauthorized code execution, posing a serious risk to users. Users are advised to update their systems to the latest package versions to mitigate this risk. The update includes additional bug fixes and is part of a new upstream release. Ubuntu Pro offers extended security coverage for affected packages.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 146d ago How this analysis works

Timeline

2026-06-01

USN-8352-1 released

Ubuntu released a security notice addressing a critical LibreOffice vulnerability affecting multiple versions.

2026-06-01

Vulnerability discovered by Duc Anh Nguyen

The vulnerability was identified due to incorrect handling of encryption salt parameters in OOXML documents.

More articles in this cluster (2)

Threat Graph

5 entities, 4 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (3)

DDoS
Denial of Service
T1203 - Exploitation for Client Execution

Organization (1)

Ubuntu

Affected Platform (1)

LibreOffice

Relationships

DDoS targets LibreOffice
Denial of Service targets LibreOffice
T1203 - Exploitation for Client Execution targets LibreOffice
DDoS related to Ubuntu

Following this threat?

Track Ubuntu in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…

Lazarus APT Launches Operation FlashHole Using AI and Post-Quantum Cryptography Kaspersky has identified a cyberespionage campaign, dubbed Operation FlashHole, attributed to the Lazarus APT group, active since July 2025. The campaign has targeted at least three organizations in South Korea's construction, software, and wire-communication sectors. Attack methods include spear-phishing emails…