CVE-2021-25633

LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to create a digitally signed ODF document, by manipulating the documentsignatures.xml or macrosignatures.xml stream within the document to combine multiple certificate data, which when opened caused LibreOffice to display a validly signed indicator but whose content was unrelated to the signature shown. This issue affects: The Document Foundation LibreOffice 7-0 versions prior to 7.0.6; 7-1 versions prior to 7.1.2.

• CWE-295
• CWE-295

• https://www.debian.org/security/2021/dsa-4988Third Party Advisory
• https://www.libreoffice.org/about-us/security/advisories/CVE-2021-25633Vendor Advisory
• https://www.debian.org/security/2021/dsa-4988Third Party Advisory
• https://www.libreoffice.org/about-us/security/advisories/CVE-2021-25633Vendor Advisory

Published

Oct 11, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-25524Insecure storage of device information in Contacts prior to …3.3
• CVE-2021-25525Improper check or handling of exception conditions vulnerabi…6.5
• CVE-2021-25526Intent redirection vulnerability in Samsung Blockchain Walle…5.5
• CVE-2021-25527Improper export of Android application components vulnerabil…3.3
• CVE-2021-25630"loolforkit" is a privileged program that is supposed to be …7.8
• CVE-2021-25631In the LibreOffice 7-1 series in versions prior to 7.1.2, an…8.8
• CVE-2021-25634LibreOffice supports digital signatures of ODF documents and…7.5
• CVE-2021-25635An Improper Certificate Validation vulnerability in LibreOff…5.5
• CVE-2021-25636LibreOffice supports digital signatures of ODF documents and…7.5
• CVE-2021-25640In Apache Dubbo prior to 2.6.9 and 2.7.9, the usage of parse…6.1
• CVE-2021-25641Each Apache Dubbo server will set a serialization id to tell…9.8
• CVE-2021-25642ZKConfigurationStore which is optionally used by CapacitySch…8.8