V12 (Organization): news timeline & CVEs

Researchers Publish Working Exploit for Pre-Auth AnyDesk Linux Flaw That Gives Root Access

Researchers released AnyPwn, a working pre-auth root exploit for AnyDesk Linux before 8.0.3.

Researchers published AnyPwn on GitHub on October 8, a working exploit for a pre-authentication heap buffer overflow in AnyDesk Linux's session protocol that can run a command as root. AnyDesk patched the flaw in version 8.0.3 in June but described it only as a crash fix, with no CVE or security advisory. The public exploit targets build 8.0.2 over direct TCP port 7070 and is probabilistic; full exploitation through AnyDesk relays was not demonstrated. A separate heap overflow, CVE-2025-27918, was fixed earlier in version 7.0.0.

The Hacker Newsupdated Oct 9, 17:15 UTC · 1d agofirst Oct 9, 12:59 UTC · 1d agoExploit / PoC 2 sources CVE-2025-279182· 2 reads

LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings

LibreOffice patched spreadsheet code execution; matching OpenOffice flaw CVE-2026-59265 remains unfixed.

Researchers showed that opening a Calc spreadsheet can refresh a database range, download an ODB file, and load an attacker-controlled JDBC driver, running Java code without a macro warning when Java support is enabled. LibreOffice fixed CVE-2026-63277 in versions 26.2.5 and 26.8.0 on October 5. Apache OpenOffice CVE-2026-59265 is unpatched through 4.1.16, with a fix expected in 4.1.17. V12 published proof-of-concept files, and there are no reports of in-the-wild use.

The Hacker Newsupdated Oct 8, 02:06 UTC · 3d agofirst Oct 6, 11:57 UTC · 4d agoVulnerability 2 sources CVE-2026-63277 CVE-2026-592651

V12

Timeline2 articles

Related CVEsby mentions

Appears with

Researchers Publish Working Exploit for Pre-Auth AnyDesk Linux Flaw That Gives Root Access

LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings