TD
Vendor security profile
The Document Foundation
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs14
Critical0
CISA KEV0
Public exploit0
Patch rate%0
Avg. CVSS6.2
12-month vulnerability rate
0
0
0
0
0
0
0
1
0
0
7
6
CVE KEV
CVE severity distribution
14toplam CVE
High1 (7%)
Medium13 (93%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
14Unknown
Latest vulnerabilities
6.7
CVE-2026-63270
Environment/ini-file leaks
TD
Patch status unknownEPSS %0
6.7
CVE-2026-63269
LFI and GET SSRF via GStreamer and HLS playlists
TD
Patch status unknownEPSS %0
6.7
CVE-2026-63268
LFI via calcext:data-mappings, sql provider and sdbc:flat:file:// db href
TD
Patch status unknownEPSS %0
6.7
CVE-2026-63267
LFI and GET SSRF via calcext:data-mappings and csv provider
TD
Patch status unknownEPSS %0
6.8
CVE-2026-63266
Arbitrary file write via calcext:data-mappings, sql provider and Firebird backup functionality
TD
Patch status unknownEPSS %0
8.5
CVE-2026-63277
RCE via calcext:data-mappings, sql provider and jdbc connector
TD
Patch status unknownEPSS %0
5.4
CVE-2026-63279
Out of bounds read in PICT image import
TD
Patch status unknownEPSS %0
6.7
CVE-2026-63278
Package URLs can be used to exfiltrate arbitrary INI file values and environment variables
TD
Patch status unknownEPSS %0
5.4
CVE-2026-63276
Stack buffer overflow in CFF to Type 1 font conversion
TD
Patch status unknownEPSS %0
5.4
CVE-2026-63275
Stack buffer overflow in CFF font hint handling
TD
Patch status unknownEPSS %0