ZDI-26-783: LibreOffice PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI disclosed a LibreOffice PDF parsing out-of-bounds write that can run code if a user opens a malicious file.
The Zero Day Initiative published ZDI-26-783, an out-of-bounds write in LibreOffice's PDF file parser tracked as CVE-2026-63273. Remote attackers can execute arbitrary code if a user opens a malicious file or visits a malicious page. ZDI assigned a CVSS score of 7.8. The advisory does not report exploitation in the wild.
- LibreOffice PDF parser has an out-of-bounds write.
- User must open a malicious file or visit a malicious page.
- Tracked as CVE-2026-63273 with a ZDI CVSS score of 7.8.
- Advisory does not report active exploitation.
- CVEs
- CVE-2026-63273CVE-2026-6045CVE-2026-63274CVE-2026-58093CVE-2026-88794CVE-2026-58094CVE-2026-93536
- Organizations
- Zero Day Initiative
Coverage
oldest first · one row per article · UTC- · 25d ago
ZDI Published AdvisoriesFirst report
ZDI-26-783: LibreOffice PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI disclosed a LibreOffice PDF parsing out-of-bounds write that can run code if a user opens a malicious file.
- · 25d ago
ZDI-26-785: FreeBSD Kernel Shared Memory Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability
ZDI disclosed FreeBSD kernel shared-memory TOCTOU bug CVE-2026-58094 enabling local privilege escalation.
- · 25d ago
ZDI-26-781: LibreOffice EMF+ Brush Integer Overflow Remote Code Execution Vulnerability
ZDI disclosed a LibreOffice EMF+ integer overflow that can enable remote code execution.
- · 25d ago
ZDI-26-782: LibreOffice PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
ZDI disclosed a LibreOffice PDF parsing overflow that can enable remote code execution.
- · 25d ago
ZDI-26-784: FreeBSD Kernel kqueue Use-After-Free Local Privilege Escalation Vulnerability
ZDI disclosed FreeBSD kernel kqueue use-after-free CVE-2026-58093 allowing local privilege escalation.
- · 25d ago
ZDI-26-779: (0Day) Sparx Systems Enterprise Architect XSLT Debugger XML External Entity Processing Information Disclosure Vulnerability
Unpatched ZDI zero-day lets remote attackers leak data from Sparx Enterprise Architect via XXE with user interaction.
- · 25d ago
ZDI-26-780: X.Org Server GestureBuildSprite Use-After-Free Information Disclosure Vulnerability
ZDI discloses a local use-after-free in X.Org Server that can leak information after low-privileged code execution.
Vulnerabilities in this story
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2026-58094+1 related CVE | The FIOSSHMLPGCNF ioctl(2) operation configures the page size for a largepage shared memory object | 7.8 group max | <1% | ||
| CVE-2026-6045 | LibreOffice can import EMF+ graphics, which may be embedded in documents | 5.4 | <1% | ||
CVE-2026-63273+1 related CVE | Heap buffer overflow in LibreOffice Draw PDF import | 5.4 | — | ||
| CVE-2026-88794 | XXE in Enterprise Architect XSLT Debugger | 8.2 | — | ||
| CVE-2026-93536 | Use-after-free in X.Org GestureBuildSprite (authenticated client) | 5.3 | — |