{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3athe_document_foundationlibreoffice/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:the_document_foundation:libreoffice:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.7,"id":"CVE-2024-7737"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["LibreOffice (\u003c 24.2.6)"],"_cs_severities":["medium"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["The Document Foundation"],"content_html":"\u003cp\u003eA vulnerability identified as CVE-2024-7737 exists in LibreOffice versions prior to 24.2.6. The flaw is caused by the improper handling of specific document features within the software, which may allow an unauthenticated remote attacker to create arbitrary files on a victim's local system when a maliciously crafted document is opened. This vulnerability poses a risk of unauthorized file system write operations. Users are advised to upgrade to the latest stable version of LibreOffice to mitigate this risk.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows for unauthorized file creation on the targeted host. Depending on the location and contents of the generated files, this could facilitate further malicious activities such as the overwriting of system configuration files, the placement of files in startup directories, or the creation of local execution artifacts. The vulnerability affects users on Windows, Linux, and macOS platforms.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003eUpdate all LibreOffice installations to version 24.2.6 or later to address the vulnerability documented in CVE-2024-7737.\u003c/p\u003e\n","date_modified":"2026-09-09T12:54:48Z","date_published":"2026-09-09T12:54:48Z","id":"https://feed.craftedsignal.io/briefs/2026-09-libreoffice-file-creation/","summary":"A vulnerability in LibreOffice (CVE-2024-7737) allows a remote attacker to create arbitrary files on a user's system by exploiting improper document feature handling.","title":"Arbitrary File Creation Vulnerability in LibreOffice","url":"https://feed.craftedsignal.io/briefs/2026-09-libreoffice-file-creation/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:the_document_foundation:libreoffice:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}