CVE-2019-9853

CVE-2019-9853 is a high-severity vulnerability affecting LibreOffice versions 6.2 prior to 6.2.7 and 6.3 prior to 6.3.1. It involves a URL decoding flaw that allows malicious macros within a document to bypass security settings, leading to arbitrary code execution despite user prompts about macro presence. The attack requires user interaction (UI:R) to open a crafted document, but once opened, it can result in high impact to confidentiality, integrity, and availability (C:H/I:H/A:H). There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.