CVE-2019-9847

A vulnerability in LibreOffice hyperlink processing allows an attacker to construct documents containing hyperlinks pointing to the location of an executable on the target users file system. If the hyperlink is activated by the victim the executable target is unconditionally launched. Under Windows and macOS when processing a hyperlink target explicitly activated by the user there was no judgment made on whether the target was an executable file, so such executable targets were launched unconditionally. This issue affects: All LibreOffice Windows and macOS versions prior to 6.1.6; LibreOffice Windows and macOS versions in the 6.2 series prior to 6.2.3.

• CWE-20

• https://www.libreoffice.org/about-us/security/advisories/cve-2019-9847/Vendor Advisory
• https://www.libreoffice.org/about-us/security/advisories/cve-2019-9847/Vendor Advisory

Published

May 9, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-9841Vesta Control Panel 0.9.8-23 allows XSS via a crafted URL.
• CVE-2019-9842madskristensen MiniBlog through 2018-05-18 allows remote att…
• CVE-2019-9843In DiffPlug Spotless before 1.20.0 (library and Maven plugin…
• CVE-2019-9844simple-markdown.js in Khan Academy simple-markdown before 0.…
• CVE-2019-9845madskristensen Miniblog.Core through 2019-01-16 allows remot…
• CVE-2019-9846RockOA 1.8.7 allows remote attackers to obtain sensitive inf…
• CVE-2019-9848LibreOffice has a feature where documents can specify that p…9.8
• CVE-2019-9849LibreOffice has a 'stealth mode' in which only documents fro…4.3
• CVE-2019-9850LibreOffice is typically bundled with LibreLogo, a programma…9.8
• CVE-2019-9851LibreOffice is typically bundled with LibreLogo, a programma…9.8
• CVE-2019-9852LibreOffice has a feature where documents can specify that p…7.8
• CVE-2019-9853LibreOffice documents can contain macros. The execution of t…7.8