The Document Foundation

LibreOffice is affected by multiple vulnerabilities that could allow a local attacker to execute arbitrary code, manipulate data, or disclose sensitive information.

A vulnerability in LibreOffice (CVE-2024-7737) allows a remote attacker to create arbitrary files on a user's system by exploiting improper document feature handling.

A vulnerability in LibreOffice allows a remote, unauthenticated attacker to execute arbitrary code on the victim's system via maliciously crafted files.