CVE-2024-7788

HIGH 7.8CVE-2024-7788 · Published 17/09/2024 · updated 17/06/2026

In short

CVE-2024-7788 is a HIGH (CVSS 7.8) vulnerability affecting libreoffice (libreoffice).
Chance of exploitation in the next 30 days (EPSS): 0.20%, higher than 9.4% of all vulnerabilities.
Fix: update to 24.2.5 or later.

Package	Affected versions	Patched versions
libreoffice libreoffice	`≥ 24.2.0, < 24.2.5`	`24.2.5`

Description

Improper Digital Signature Invalidation vulnerability in Zip Repair Mode of The Document Foundation LibreOffice allows Signature forgery vulnerability in LibreOfficeThis issue affects LibreOffice: from 24.2 before < 24.2.5.

References

libreoffice.org/about-us/security/advisories/CVE-2024-7788 · Vendor Advisory
lists.debian.org/debian-lts-announce/2024/10/msg00007.html

More vulnerabilities in libreoffice

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

libreoffice

≥ 24.2.0, < 24.2.5

24.2.5

More vulnerabilities in libreoffice

See all →