{"vulnerability": "cve-2026-6327", "sightings": [{"uuid": "d79be1bf-a627-4374-bfa8-9bd238c9ac74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63278", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mw4b3d2jjx2g", "content": "CVE-2026-63278 affects LibreOffice from The Document Foundation: crafted document links could expand environment variable or INI file values and exfiltrate that data to a remote server on open. Fixed in LibreOffice 26.2.5. No exploitation confirmed.", "creation_timestamp": "2026-09-22T12:46:50.062316Z"}, {"uuid": "441499a8-2f35-487b-8591-1bb5804994be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63272", "type": "seen", "source": "https://bsky.app/profile/cybersecinsight.bsky.social/post/3mw6ns4wp7w2h", "content": "\ud83d\udd0d Vulnerability Spotlight | Part 2/3\n\n\u26a0\ufe0f CVE-2026-63272\n\nLibreOffice can import WMF graphics, which may be embedded in documents. A heap buffer overflow existed when importing a text record that carries i...", "creation_timestamp": "2026-09-23T11:39:39.368317Z"}, {"uuid": "1c69f553-9c16-4362-a7fd-1489db4c451f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63279", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mwrr5625x72u", "content": "CVE-2026-63279 Out-of-bounds read in LibreOffice PICT image import. CVSS N/A, no patch yet. Malicious docs can leak memory. Update immediately or avoid untrusted files. https://www.valtersit.com/cve/CVE-2026-63279/ #CVE #infosec #LibreOffice", "creation_timestamp": "2026-10-01T02:00:06.087161Z"}, {"uuid": "a9f6b12d-3575-41b7-bf6f-62d13df86dfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63279", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117363179872631227", "content": "CVE-2026-63279 Out-of-bounds read in LibreOffice PICT image import. CVSS N/A, no patch yet. Malicious docs can leak memory. Update immediately or avoid untrusted files. https://www.valtersit.com/cve/CVE-2026-63279/ #CVE #infosec #LibreOffice", "creation_timestamp": "2026-10-01T02:00:10.203571Z"}, {"uuid": "07ac0b71-fe23-40dd-87c0-1b43b5f4ffc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63276", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117378082680486515", "content": "CVE-2026-63276 LibreOffice stack buffer overflow, CVSS 7.8, triggered by exporting a malicious document to PDF. No patch yet. Avoid untrusted files until fixed. https://www.valtersit.com/cve/CVE-2026-63276/ #CVE #infosec #LibreOffice", "creation_timestamp": "2026-10-03T17:10:05.640133Z"}, {"uuid": "3ac1b16e-8d8c-44ba-aa21-80ec7b3f134d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63278", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117378477131230353", "content": "CVE-2026-63278: info disclosure via crafted URLs that expand env or INI values, leaking secrets to remote servers. Incomplete fix for CVE-2024-12426. CVSS 7.4, no patch yet. Restrict document links and monitor outbound https://www.valtersit.com/cve/CVE-2026-63278/ #CVE #infosec #cybersecurity", "creation_timestamp": "2026-10-03T18:50:26.357381Z"}, {"uuid": "8ba6229b-4e34-4bd6-bcd9-d1607308fa20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63275", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117378830208359442", "content": "CVE-2026-63275 stack buffer overflow in LibreOffice CFF font glyph hint parsing. Open a malicious document, get code execution. No CVSS or patch yet. Treat untrusted docs with care. https://www.valtersit.com/cve/CVE-2026-63275/ #CVE #LibreOffice #infosec", "creation_timestamp": "2026-10-03T20:20:11.752180Z"}, {"uuid": "b7c3462c-ea47-4aca-990b-1de37f7b9c1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63274", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mwyv56udbn27", "content": "CVE-2026-63274 LibreOffice Draw heap buffer overflow on PDF import, no CVSS, patch status unknown. Opening a crafted PDF can corrupt memory. Treat untrusted PDFs with caution and update as soon as a fix lands. https://www.valtersit.com/cve/CVE-2026-63274/ #CVE #infosec #LibreOffice", "creation_timestamp": "2026-10-03T22:00:19.992934Z"}, {"uuid": "a1ee1277-a341-4f52-a0bc-602ec8f382c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63274", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117379224014012700", "content": "CVE-2026-63274 LibreOffice Draw heap buffer overflow on PDF import, no CVSS, patch status unknown. Opening a crafted PDF can corrupt memory. Treat untrusted PDFs with caution and update as soon as a fix lands. https://www.valtersit.com/cve/CVE-2026-63274/ #CVE #infosec #LibreOffice", "creation_timestamp": "2026-10-03T22:00:34.770079Z"}, {"uuid": "d5c2db2a-d929-4fbf-9ed8-91d2a2734ec1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63272", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117380087929941260", "content": "CVE-2026-63272 LibreOffice heap buffer overflow when importing WMF graphics in documents. CVSS 5.3. No patch yet. Avoid untrusted files and update as soon as a fix ships. https://www.valtersit.com/cve/CVE-2026-63272/ #CVE #infosec #LibreOffice", "creation_timestamp": "2026-10-04T01:40:04.587745Z"}, {"uuid": "ff148b48-b35a-4efe-a971-769fc993272c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63273", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117380718831004758", "content": "CVE-2026-63273 LibreOffice Draw heap buffer overflow via encrypted PDF key length, CVSS 7.8. No patch yet, so treat untrusted PDFs with care. Details: https://www.valtersit.com/cve/CVE-2026-63273/ #CVE #infosec #LibreOffice", "creation_timestamp": "2026-10-04T04:20:29.463040Z"}, {"uuid": "647c82c4-4871-40b0-b51c-30c98e63b20f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63273", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mwzkw7q62z2n", "content": "CVE-2026-63273 LibreOffice Draw heap buffer overflow via encrypted PDF key length, CVSS 7.8. No patch yet, so treat untrusted PDFs with care. Details: https://www.valtersit.com/cve/CVE-2026-63273/ #CVE #infosec #LibreOffice", "creation_timestamp": "2026-10-04T04:30:07.960179Z"}, {"uuid": "f6186344-0042-428e-a9cc-21bcfc1d0bfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63277", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mx4trwc65e2o", "content": "LibreOffice fixed six document-handling flaws. The worst, CVE-2026-63277, runs a remote Java driver when you open a Calc file.\n\nSeveral fire automatically on load, no macro needed.\n\nFix: update to 26.2.5 or 26.8.0.", "creation_timestamp": "2026-10-05T11:46:47.347694Z"}, {"uuid": "b1b906c1-7963-42de-a777-5efeaf7d5bf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63277", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mx5255l4ja27", "content": "\ud83d\udd17 CVE : CVE-2026-59265, CVE-2026-59265, CVE-2026-63277", "creation_timestamp": "2026-10-05T13:40:25.919726Z"}, {"uuid": "e5f545e5-5223-4fec-831a-12455408167c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63277", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/6l2heks7erwpk", "content": "CVE-2026-63277 - RCE via calcext:data-mappings, sql provider and jdbc connector\nCVE ID : CVE-2026-63277\n \n Published : Oct. 5, 2026, 12:17 p.m. | 1\u00a0hour, 11\u00a0minutes ago\n \n Description : LibreOffice Calc can link a cell range to an external data source, and the link is saved in...", "creation_timestamp": "2026-10-05T14:12:24.499837Z"}, {"uuid": "5c357836-ab36-4f55-a98a-ca5f012ad5b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63277", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mx6gfjlpdm2p", "content": "PoC released for LibreOffice Calc vulnerability CVE-2026-63277, which runs code when a file opens. Five more flaws fixed. Upgrade to 26.2.5.\n\n#LibreOffice #LibreOfficeCalc #CVE202663277 #CVE202663266 #PoC #RCE #OpenSource #Vulnerability", "creation_timestamp": "2026-10-06T02:52:32.335141Z"}, {"uuid": "9d5e59bd-093d-46ca-957c-f79ee4784caf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63277", "type": "seen", "source": "https://bsky.app/profile/raul.mastodon.in4matics.cat.ap.brid.gy/post/3mx7ozeage7d2", "content": "\u26a0\ufe0f Obrir un full de c\u00e0lcul i que s'executi codi sense cap av\u00eds de macro. Aix\u00f2 \u00e9s.\n\nAfecta LibreOffice (CVE-2026-63277, arreglat a les 26.2.5/26.8.0) i Apache OpenOffice (CVE-2026-59265, encara sense pegat: desactiva Java). L'atac aprofita rangs de base de dades + JDBC per baixar un JAR malici\u00f3s [\u2026]", "creation_timestamp": "2026-10-06T14:59:31.217814Z"}, {"uuid": "991e5358-bb5e-4ecf-910e-9aa6a655f526", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63277", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mx7wnp6wr52n", "content": "CVE-2026-63277 is trending. Hype score 6, currently #8 on cvemon.\n\nLibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A document could name a Java database driver for such a link to be loaded\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-63277", "creation_timestamp": "2026-10-06T17:16:05.843323Z"}, {"uuid": "675f57f4-2f4c-45c5-9414-a0b088f92a57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63277", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mxa7toyqqn2y", "content": "Malicious spreadsheets can execute code in LibreOffice and Apache OpenOffice when Java is enabled, bypassing macro warnings. LibreOffice fixed CVE-2026-63277; OpenOffice still affected. #LibreOffice #OpenOffice #CVE202663277", "creation_timestamp": "2026-10-06T20:00:31.462823Z"}]}