Red Hat Security Advisory: libreoffice security update
Affects Red HatSource GCVE Database
Not known to be exploited : upgrade to 9.9 when convenient.
Data as of 26 Oct 2026, 06:26 UTC
Rated by Threat Radar · No CVSS score from NVD or the CNA
- EPSS
- 1.0% chance of exploitation in 30 days – higher than 62% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
- Patch
- Available – fixed in 9.9
Exploitation evidence
Disclosed: evidence found.
CVE published 23 Jul 2024
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 2026-10-26.
What to do
Upgrade redhat/libreoffice to 9.9.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
Red Hatredhat/libreofficepkg:rpm/redhat/libreofficeOther threats | Affected
| Fixed in
|
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Red Hat has released an official security update for LibreOffice in Red Hat Enterprise Linux 9 and its extended update support versions. Users should apply the update as described in Red Hat advisory RHSA-2024:4755 and the referenced article https://access.redhat.com/articles/11258 to remediate this vulnerability. No additional mitigation steps are indicated beyond applying the vendor-provided update.
Description
A security vulnerability (CVE-2024-3044) in LibreOffice allows a crafted document to execute built-in scripts without user prompt when clicking a graphic. This issue affects LibreOffice packages distributed with Red Hat Enterprise Linux 9 and its extended update support versions. Red Hat has released a security update to address this vulnerability. The severity is rated as moderate by Red Hat Product Security.