LibreOffice CVE-2025-0514 Validation Bypass Vulnerability

Description

Improper input validation in LibreOffice 24.8 (up to 24.8.4) allows unconditionally executing Windows executable hyperlink targets when activated.

Outbreak Alert

FortiGuard Labs has observed significant level of exploitation attempts targeting the new PHP vulnerability. The TellYouThePass ransomware gang has been leveraging CVE-2024-4577, a remote code execution vulnerability in PHP to deliver web shells and deploy ransomware on targeted systems.

View the full Outbreak Alert Report

Affected Applications

LibreOffice

References