{"id":"CVE-2018-10583","url":"https://www.cyber-defence.io/tools/cve/CVE-2018-10583","generatedAt":"2026-10-29T01:53:16.855Z","title":"An information disclosure vulnerability occurs when LibreOffice 6.0.3 and Apache OpenOffice Writer 4.1.5 automatically process and initiate an SMB connection embedded in a malicious file, as demonstrated by xlink:href=file://192.168.0.2/test.jpg within…","description":"An information disclosure vulnerability occurs when LibreOffice 6.0.3 and Apache OpenOffice Writer 4.1.5 automatically process and initiate an SMB connection embedded in a malicious file, as demonstrated by xlink:href=file://192.168.0.2/test.jpg within an office:document-content element in a .odt XML document.","published":"2018-05-01T16:29:00.000Z","lastModified":"2026-06-17T01:34:13.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"3.0","score":7.5,"severity":"HIGH","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},"cwe":["CWE-200"],"affected":["libreoffice/libreoffice","apache/openoffice","debian/debian linux","redhat/enterprise linux desktop","redhat/enterprise linux server","redhat/enterprise linux workstation","canonical/ubuntu linux"],"epss":{"score":0.78006,"percentile":0.99572,"date":"2026-10-27","history":[{"date":"2026-09-21","score":0.84244,"percentile":0.99693},{"date":"2026-09-22","score":0.78342,"percentile":0.9956}]},"kev":{"listed":false},"exploits":{"count":1,"verified":false,"firstPublished":"2018-05-02","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":44564,"kind":"exploit","title":"LibreOffice/Open Office - '.odt' Information Disclosure","url":"https://www.exploit-db.com/exploits/44564","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/local/44564.py","file":"exploits/windows/local/44564.py","published":"2018-05-02","added":"2018-05-02","updated":"2018-05-02","author":"Richard Davy","type":"local","platform":"windows","port":null,"verified":false,"codes":["CVE-2018-10583"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null}]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 78.0%, higher than 100% of all known CVEs. Patch or mitigate before the next change window."},"changes":[{"kind":"epss","label":"EPSS jump","at":"2026-09-21T00:00:00.000Z","detail":{"to":0.84244,"from":0.78342,"percentile":0.99693},"summary":"EPSS moved from 78.3% to 84.2% probability of exploitation in the next thirty days."}],"references":[{"url":"http://seclists.org/fulldisclosure/2020/Oct/26","source":"cve@mitre.org"},{"url":"http://secureyourit.co.uk/wp/2018/05/01/creating-malicious-odt-files/","tags":["Exploit","Mitigation","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://access.redhat.com/errata/RHSA-2018:3054","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/0598708912978b27121b2e380b44a225c706aca882cd1da6a955a0af%40%3Cdev.openoffice.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/6c65f22306c36c95e75f8d2b7f49cfcbeb0a4614245c20934612a39d%40%3Cdev.openoffice.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/c8fd59ac77b42aac90eb5c59b87f3ab59b5e0c3bfb4819aa649a2909%40%3Cdev.openoffice.apache.org%3E","source":"cve@mitre.org"},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-10583","tags":["Issue Tracking","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/3883-1/","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/44564/","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2020/Oct/26","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secureyourit.co.uk/wp/2018/05/01/creating-malicious-odt-files/","tags":["Exploit","Mitigation","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2018:3054","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/0598708912978b27121b2e380b44a225c706aca882cd1da6a955a0af%40%3Cdev.openoffice.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/6c65f22306c36c95e75f8d2b7f49cfcbeb0a4614245c20934612a39d%40%3Cdev.openoffice.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/c8fd59ac77b42aac90eb5c59b87f3ab59b5e0c3bfb4819aa649a2909%40%3Cdev.openoffice.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-10583","tags":["Issue Tracking","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/3883-1/","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/44564/","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2018-10583","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}