Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 7

Количество 7

github логотип

GHSA-65c5-j3wr-v7fh

8 месяцев назад

An Authentication Bypass vulnerability existed where the application bundled an interpreter (Python) that inherits the Transparency, Consent, and Control (TCC) permissions granted by the user to the main application bundle By executing the bundled interpreter directly the attacker's scripts run with the application's TCC privileges In fixed versions parent-constraints are used to allow only the main application to launch interpreter with those permissions This issue affects LibreOffice on macOS: from 25.2 before < 25.2.4.

CVSS3: 6.5
EPSS: Низкий
ubuntu логотип

CVE-2025-14714

8 месяцев назад

An Authentication Bypass vulnerability existed where the application bundled an interpreter (Python) that inherits the Transparency, Consent, and Control (TCC) permissions granted by the user to the main application bundle By executing the bundled interpreter directly the attacker's scripts run with the application's TCC privileges In fixed versions parent-constraints are used to allow only the main application to launch interpreter with those permissions This issue affects LibreOffice on macOS: from 25.2 before < 25.2.4.

CVSS3: 6.5
EPSS: Низкий
redhat логотип

CVE-2025-14714

8 месяцев назад

An Authentication Bypass vulnerability existed where the application bundled an interpreter (Python) that inherits the Transparency, Consent, and Control (TCC) permissions granted by the user to the main application bundle By executing the bundled interpreter directly the attacker's scripts run with the application's TCC privileges In fixed versions parent-constraints are used to allow only the main application to launch interpreter with those permissions This issue affects LibreOffice on macOS: from 25.2 before < 25.2.4.

CVSS3: 3.9
EPSS: Низкий
nvd логотип

CVE-2025-14714

8 месяцев назад

An Authentication Bypass vulnerability existed where the application bundled an interpreter (Python) that inherits the Transparency, Consent, and Control (TCC) permissions granted by the user to the main application bundle By executing the bundled interpreter directly the attacker's scripts run with the application's TCC privileges In fixed versions parent-constraints are used to allow only the main application to launch interpreter with those permissions This issue affects LibreOffice on macOS: from 25.2 before < 25.2.4.

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2025-14714

8 месяцев назад

An Authentication Bypass vulnerability existed where the application b ...

CVSS3: 6.5
EPSS: Низкий
fstec логотип

BDU:2026-02196

8 месяцев назад

Уязвимость пакета офисных программ LibreOffice, связанная с обходом аутентификации посредством использования альтернативного пути или канала, позволяющая нарушителю повысить свои привилегии

CVSS3: 5.5
EPSS: Низкий
redos логотип

ROS-20260625-80-0017

около 2 месяцев назад

Уязвимость libreoffice

CVSS3: 5.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
github логотип
GHSA-65c5-j3wr-v7fh

An Authentication Bypass vulnerability existed where the application bundled an interpreter (Python) that inherits the Transparency, Consent, and Control (TCC) permissions granted by the user to the main application bundle By executing the bundled interpreter directly the attacker's scripts run with the application's TCC privileges In fixed versions parent-constraints are used to allow only the main application to launch interpreter with those permissions This issue affects LibreOffice on macOS: from 25.2 before < 25.2.4.

CVSS3: 6.5
0%
Низкий
8 месяцев назад
ubuntu логотип
CVE-2025-14714

An Authentication Bypass vulnerability existed where the application bundled an interpreter (Python) that inherits the Transparency, Consent, and Control (TCC) permissions granted by the user to the main application bundle By executing the bundled interpreter directly the attacker's scripts run with the application's TCC privileges In fixed versions parent-constraints are used to allow only the main application to launch interpreter with those permissions This issue affects LibreOffice on macOS: from 25.2 before < 25.2.4.

CVSS3: 6.5
0%
Низкий
8 месяцев назад
redhat логотип
CVE-2025-14714

An Authentication Bypass vulnerability existed where the application bundled an interpreter (Python) that inherits the Transparency, Consent, and Control (TCC) permissions granted by the user to the main application bundle By executing the bundled interpreter directly the attacker's scripts run with the application's TCC privileges In fixed versions parent-constraints are used to allow only the main application to launch interpreter with those permissions This issue affects LibreOffice on macOS: from 25.2 before < 25.2.4.

CVSS3: 3.9
0%
Низкий
8 месяцев назад
nvd логотип
CVE-2025-14714

An Authentication Bypass vulnerability existed where the application bundled an interpreter (Python) that inherits the Transparency, Consent, and Control (TCC) permissions granted by the user to the main application bundle By executing the bundled interpreter directly the attacker's scripts run with the application's TCC privileges In fixed versions parent-constraints are used to allow only the main application to launch interpreter with those permissions This issue affects LibreOffice on macOS: from 25.2 before < 25.2.4.

CVSS3: 6.5
0%
Низкий
8 месяцев назад
debian логотип
CVE-2025-14714

An Authentication Bypass vulnerability existed where the application b ...

CVSS3: 6.5
0%
Низкий
8 месяцев назад
fstec логотип
BDU:2026-02196

Уязвимость пакета офисных программ LibreOffice, связанная с обходом аутентификации посредством использования альтернативного пути или канала, позволяющая нарушителю повысить свои привилегии

CVSS3: 5.5
0%
Низкий
8 месяцев назад
redos логотип
ROS-20260625-80-0017

Уязвимость libreoffice

CVSS3: 5.5
0%
Низкий
около 2 месяцев назад

Уязвимостей на страницу