Critical Vulnerability in LibreOffice: CVE-2026-63277 Exposes User Data
Summary
DEBIAN-CVE-2026-63277: ... Affects libreoffice versions 4:24.2.0-1 – 4:7.6.4~rc1-1~bpo12+1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
LibreOffice is a powerful open-source office suite that provides a range of applications for word processing, spreadsheets, presentations, and more. It is widely used across various platforms due to its robust features and compatibility with multiple document formats. However, recent vulnerabilities have raised concerns about the security of user data, particularly CVE-2026-63277, which affects multiple versions of the software.
Vulnerability Detail
CVE-2026-63277 is a vulnerability found in LibreOffice that allows unauthorized access to sensitive user data. This issue arises from improper handling of certain input data, which could lead to data leakage or unauthorized manipulation of documents. The vulnerability has a CVSS score of 4.0, indicating a moderate level of risk. Attackers could exploit this vulnerability to gain access to confidential information, potentially leading to data breaches or loss of integrity in documents.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users are advised to limit the use of LibreOffice for sensitive documents until the update is applied. Additionally, users can consider using alternative office suites that do not exhibit this vulnerability.
Conclusion
CVE-2026-63277 poses a significant risk to users of LibreOffice, allowing unauthorized access to sensitive data. It is crucial for users to update to the latest version to mitigate this vulnerability. By following the provided steps, users can protect their information and maintain the integrity of their documents.
See every vulnerability recorded for libreoffice →
FAQ
CVE-2026-63277 is a vulnerability in LibreOffice that can lead to unauthorized access to user data.
You can check your version of LibreOffice by navigating to 'Help' > 'About LibreOffice'. If you are using a version prior to 4:26.2.5.2-1, you are at risk.
If you cannot update immediately, avoid using LibreOffice for sensitive documents and consider using alternative software until the update is applied.
More information can be found on the official CVE website or through security advisories related to LibreOffice.
Vulert uses a manifest file like package-lock.json to monitor and alert in real-time for open-source vulnerabilities in your software, ensuring you stay informed about potential risks.
References
Related vulnerabilities
Recent vulnerabilities recorded for libreoffice.
