CVE-2025-0514: Executable hyperlink Windows path targets executed unconditionally on activation
Published Feb 25, 2025
·Updated
Improper Input Validation vulnerability in The Document Foundation LibreOffice allows Windows Executable hyperlink targets to be executed unconditionally on activation.This issue affects LibreOffice: from 24.8 before < 24.8.5.
Affected Software
2 affected components
The Document Foundation LibreOffice>24.8, <24.8.5
LibreOffice Libreoffice>=24.8.0.0<24.8.5.1
Event History
Feb 25, 2025
CVE Published
via MITRE·09:16 PM
Data Sourced
via MITRE·09:16 PM
DescriptionWeakness
Data Sourced
via NVD·10:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-0514?
CVE-2025-0514 has a medium severity rating due to its improper input validation allowing unwanted execution of Windows Executables.
2
How do I fix CVE-2025-0514?
To fix CVE-2025-0514, update LibreOffice to version 24.8.5 or later.
3
Which versions of LibreOffice are affected by CVE-2025-0514?
CVE-2025-0514 affects LibreOffice versions from 24.8 up to but not including 24.8.5.
4
What impact does CVE-2025-0514 have on users?
CVE-2025-0514 may allow attackers to execute Windows Executables without user consent when hyperlinks are activated.
5
Is CVE-2025-0514 present in LibreOffice on all operating systems?
CVE-2025-0514 specifically affects the Windows versions of LibreOffice.