WORLD WATCH · October 16, 2026 · EXPOSURE
Chromium and LibreOffice flaws reported
Three vulnerabilities in Chromium and LibreOffice were reported on 2026-10-16.
- Reported by
- MSRC, Zero Day Initiative
- Outlets reporting
- 2
- Category
- EXPOSURE
- Identifiers
- CVE-2026-106292
- Newest report
- October 16, 2026
Plain-English brief. Written for readers who work in a second language.
Key takeaways
- CVE-2026-106292 is a Chromium buffer overflow
- ZDI-26-782 affects LibreOffice PDF parsing
- ZDI-26-781 affects LibreOffice EMF+ brush handling
- Both LibreOffice flaws need user interaction
What happened
MSRC reported CVE-2026-106292, a buffer overflow in Chromium. Microsoft Edge uses Chromium, which addresses this vulnerability. Zero Day Initiative reported ZDI-26-782, a heap-based buffer overflow in LibreOffice PDF parsing. Zero Day Initiative also reported ZDI-26-781, an integer overflow in LibreOffice EMF+ brush handling. Both LibreOffice flaws need user interaction. The target must visit a malicious page or open a malicious file. The ZDI assigned a CVSS rating to both LibreOffice flaws.
Why it matters
Attackers can run arbitrary code on affected LibreOffice installations. Edge users receive the Chromium fix through Chromium ingestion.
What to do
- Update Microsoft Edge to the latest build.
- Update LibreOffice to a patched release.
- Avoid opening untrusted files or visiting untrusted pages.
SOURCE: INTEL128 WORLD WATCH (UPDATED OCT 16, 2026). This brief summarizes reporting by MSRC, Zero Day Initiative. Intel128 writes the summary and credits the outlet. Read the summary as a starting point, not as a substitute for the original reporting.