LibreOffice 24.8 Before 24.8.5 Windows EXE Hyperlink RCE
CVE-2025-0514 Published on February 25, 2025
Executable hyperlink Windows path targets executed unconditionally on activation
Improper Input Validation vulnerability in The Document Foundation LibreOffice allows Windows Executable hyperlink targets to be executed unconditionally on activation.This issue affects LibreOffice: from 24.8 before < 24.8.5.
Vulnerability Analysis
CVE-2025-0514 is exploitable with local system access. This vulnerability is consided to have a high level of attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity and availability.
Weakness Type
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
Products Associated with CVE-2025-0514
Want to know whenever a new CVE is published for LibreOffice? stack.watch will email you.
Affected Versions
The Document Foundation LibreOffice:- Version 24.8 and below < 24.8.5 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.