CVE-2018-6871

CVE-2018-6871 is a critical vulnerability affecting LibreOffice versions prior to 5.4.5 and 6.0.1, allowing remote attackers to read arbitrary files. This is achieved through malicious documents utilizing the =WEBSERVICE function, specifically COM.MICROSOFT.WEBSERVICE calls. With a CVSS score of 9.8, it presents a high risk due to its network-based attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog and showing no active exploitation or community discussion, public exploit code exists on ExploitDB, indicating a clear path for potential attackers.