CVE-2026-4430

Publication date 7 May 2026

Last updated 5 June 2026

Ubuntu priority

Medium

Why this priority?

Cvss 3 Severity Score

7.8 · High

Score breakdown

Description

Out-of-bounds write vulnerability in The Document Foundation LibreOffice via crafted OOXML documents with mismatched encryption salt parameters. This issue affects LibreOffice: from 26.2 before 26.2.3, from 25.8 before 25.8.7.

Status

Package Ubuntu Release Status
libreoffice 26.04 LTS resolute
Fixed 4:26.2.3.2-0ubuntu0.26.04.1
25.10 questing
Fixed 4:25.8.7-0ubuntu0.25.10.1
24.04 LTS noble
Fixed 4:24.2.7-0ubuntu0.24.04.5
22.04 LTS jammy
Fixed 1:7.3.7-0ubuntu0.22.04.11
20.04 LTS focal
Needs evaluation

Severity score breakdown

Parameter Value
Base score 7.8 · High
Attack vector Local
Attack complexity Low
Privileges required None
User interaction Required
Scope Unchanged
Confidentiality High
Integrity impact High
Availability impact High
Vector CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References

Related Ubuntu Security Notices (USN)

Other references

Access our resources on patching vulnerabilities