CVE-2023-6186

    Dashboard / Vulnerabilities / CVE-2023-6186

    CVE-2023-6186

    Published: 11 Dec 2023Last Modified: 24 Oct 2026

    Summary:

    Details: Insufficient macro permission validation of The Document Foundation LibreOffice allows an attacker to execute built-in macros without warning. In affected versions LibreOffice supports hyperlinks with macro or similar built-in command targets that can be executed when activated without warning the user.

    References: https://lists.debian.org/debian-lts-announce/2023/12/msg00026.html, https://lists.fedoraproject.org/archives/list/[email protected]/message/QB7UB6CTWQUDOE657OVVRSDYUY3IPBJG/, https://www.debian.org/security/2023/dsa-5574, https://www.libreoffice.org/about-us/security/advisories/cve-2023-6186

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -e19e193f88cd6c0525a17fb7a176ed8e6a3e2aa1

    Affected versions

    libreoffice-7-6-branch-point

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2023-6186 | CVE-DB