CVE-2024-7788: Improper Digital Signature Invalidation vulnerability in Zip Repair Mode of The Document Foundation LibreOffice allows Signature forgery vulnerability in…

PriorityP434high7.8CVSS 3.1

AVLACLPRNUIRSUCHIHAH

EPSS

0.20%

9.5th percentile

Improper Digital Signature Invalidation vulnerability in Zip Repair Mode of The Document Foundation LibreOffice allows Signature forgery vulnerability in LibreOfficeThis issue affects LibreOffice: from 24.2 before < 24.2.5.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
debian	libreoffice	< libreoffice 4:7.4.7-1+deb12u5 (bookworm)	libreoffice 4:7.4.7-1+deb12u5 (bookworm)
libreoffice	libreoffice	>= 0 < 1:7.0.4-4+deb11u11	1:7.0.4-4+deb11u11
libreoffice	libreoffice	>= 0 < 4:7.4.7-1+deb12u5	4:7.4.7-1+deb12u5
libreoffice	libreoffice	>= 0 < 4:24.2.5-1	4:24.2.5-1
libreoffice	libreoffice	>= 0 < 4:24.2.5-1	4:24.2.5-1
libreoffice	libreoffice	>= 24.2.0 < 24.2.5	24.2.5
the_document_foundation	libreoffice	>= 24.2 < < 24.2.5	< 24.2.5

CVSS provenance

nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

osv7.8HIGH

vendor_debian7.8HIGH

vendor_redhat7.8HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.