CVE-2023-6186

Name of the Vulnerable Software and Affected Versions LibreOffice (affected versions not specified)

Description The issue is related to insufficient macro permission validation, allowing an attacker to execute built-in macros without warning. In affected versions, LibreOffice supports hyperlinks with macro or similar built-in command targets that can be executed when activated without warning the user. This could potentially enable a remote attacker to execute arbitrary code by embedding a malicious macro in a document.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.