CVE-2025-0514: Libreoffice

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Improper Input Validation vulnerability in The Document Foundation LibreOffice allows Windows Executable hyperlink targets to be executed unconditionally on activation.This issue affects LibreOffice: from 24.8 before < 24.8.5.

Affected products

• Libreoffice Libreoffice: from 24.8.0.0, before 24.8.5.1 (fixed in 24.8.5.1)

Published 2025-02-25. Last modified 2026-06-17.