https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T21:09:58.194874+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2018-6871 CVE-2018-6871 2026-09-29T21:09:59.248907+00:00

LibreOffice before 5.4.5 and 6.x before 6.0.1 allows remote attackers to read arbitrary files via =WEBSERVICE calls in a document, which use the COM.MICROSOFT.WEBSERVICE function.

 https://vulnerability.circl.lu/vuln/usn-3579-1 USN-3579-1 — libreoffice vulnerability 2026-09-29T21:09:59.248983+00:00

Affected: Ubuntu:14.04:LTS: libreoffice, Ubuntu:16.04:LTS: libreoffice

It was discovered that =WEBSERVICE calls in a document could be used to read arbitrary files. If a user were tricked in to opening a specially crafted document, a remote attacker could exploit this to obtain sensitive information. (CVE-2018-6871)