Back to Database
Status published
High
CVE-2025-0514
Executable hyperlink Windows path targets executed unconditionally on activation
Vulnerability Description
Improper Input Validation vulnerability in The Document Foundation LibreOffice allows Windows Executable hyperlink targets to be executed unconditionally on activation.This issue affects LibreOffice: from 24.8 before < 24.8.5.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-0514
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Amel Bouziane-Leblond
More from The Document Foundation
View All →CVE-2025-2866
PDF signature forgery with adbe.pkcs7.sha1 SubFilter
Low
2.4
CVE-2025-1080
Macro URL arbitrary script execution
High
7.2
CVE-2025-14714
TCC Bypass via Inherited Permissions in Bundled Interpreter
Low
0.9
CVE-2024-7788
Signatures in "repair mode" should not be trusted
High
7.8
CVE-2024-6472
Ability to trust not validated macro signatures removed in high security mode
High
7.8
Affected Vendor
The Document Foundation
View all reports →Affected Software
LibreOffice
Vulnerable Versions:
24.8
Timeline
Official Publish:
February 25th, 2025
Last Modified:
February 25th, 2025
Added to House:
July 22nd, 2026