Amel Bouziane

**Name of the Vulnerable Software and Affected Versions** LibreOffice versions 24.8 through 24.8.4 LibreOffice versions 25.2 through 25.2.0 **Description** The issue affects LibreOffice's integration with MS SharePoint server, where an additional scheme 'vnd.libreoffice.command' was added to support Office URI Schemes. In the affected versions, a link in a browser using this scheme could be constructed with an embedded inner URL that, when passed to LibreOffice, could call internal macros with arbitrary arguments. This allows attackers to execute arbitrary scripts, potentially leading to remote code execution attacks. The flaw bypasses existing security measures by targeting document collaboration workflows. Millions of users are at risk, particularly those relying on hybrid office solutions. **Recommendations** For LibreOffice versions 24.8 through 24.8.4, update to version 24.8.5 or later. For LibreOffice versions 25.2 through 25.2.0, update to version 25.2.1 or later. As a temporary workaround, consider disabling the use of the 'vnd.libreoffice.command' scheme until a patch is available. Restrict access to internal macros to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** LibreOffice (affected versions not specified) **Description** The issue is related to unchecked script execution in Graphic on-click binding, allowing an attacker to create a document that executes scripts built into LibreOffice without prompting the user. These scripts were previously considered trusted but are now deemed untrusted. The vulnerability can be exploited by a remote attacker to execute arbitrary code by embedding a specially crafted script into a file that is opened by the user. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.