QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2025-2866

Back to search

CVE-2025-2866

Published: Apr 27, 2025

Modified: Nov 3, 2025

PUBLISHED

Description

Improper Verification of Cryptographic Signature vulnerability in LibreOffice allows PDF Signature Spoofing by Improper Validation. In the affected versions of LibreOffice a flaw in the verification code for adbe.pkcs7.sha1 signatures could cause invalid signatures to be accepted as valid This issue affects LibreOffice: from 24.8 before < 24.8.6, from 25.2 before < 25.2.2.

VendorProductVersions

The Document Foundation

LibreOffice

affected
24.8 - < < 24.8.6
affected
25.2 - < < 25.2.2

Weaknesses (CWE)

CWE-347

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now