https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 04:20:55 +0000 https://vulnerability.circl.lu/vuln/cve-2025-14714 <p><strong>Affected:</strong> The Document Foundation LibreOffice</p> <p>An Authentication Bypass vulnerability existed where the application bundled an interpreter (Python) that inherits the Transparency, Consent, and Control (TCC) permissions granted by the user to the main application bundle</p> <p>By executing the bundled interpreter directly the attacker&#39;s scripts run with the application&#39;s TCC privileges</p> <p>In fixed versions parent-constraints are used to allow only the main application to launch interpreter with those permissions</p> <p>This issue affects LibreOffice on macOS: from 25.2 before &lt; 25.2.4.</p> <p><strong>Affected:</strong> The Document Foundation LibreOffice</p> <p>An Authentication Bypass vulnerability existed where the application bundled an interpreter (Python) that inherits the Transparency, Consent, and Control (TCC) permissions granted by the user to the main application bundle</p> <p>By executing the bundled interpreter directly the attacker&#39;s scripts run with the application&#39;s TCC privileges</p> <p>In fixed versions parent-constraints are used to allow only the main application to launch interpreter with those permissions</p> <p>This issue affects LibreOffice on macOS: from 25.2 before &lt; 25.2.4.</p> https://vulnerability.circl.lu/vuln/cve-2025-14714