Apache OpenOffice flaws in handling crafted documents
Free office program: opening a rigged document can get your PC hacked.
Summary
Opening a crafted document in Apache OpenOffice 4.1.16 or earlier can crash the program, corrupt memory, expose files on the PC, or run other code. Every user of those versions is affected.
Affected when
- Opening a crafted document
What to do
Update to OpenOffice 4.1.17. Until then, do not open documents from unknown sources.
Products and platforms
CVE IDs
- CVE-2026-59263 (opens in a new tab)
- CVE-2026-59264 (opens in a new tab)
- CVE-2026-59268 (opens in a new tab)
- CVE-2026-90624 (opens in a new tab)
- CVE-2026-90626 (opens in a new tab)
- CVE-2026-90627 (opens in a new tab)
- CVE-2026-90628 (opens in a new tab)
- CVE-2026-90629 (opens in a new tab)
- CVE-2026-90631 (opens in a new tab)
- CVE-2026-90634 (opens in a new tab)
- CVE-2026-90632 (opens in a new tab)
- CVE-2026-59267 (opens in a new tab)
Sources
- Advisory: lists.apache.org (opens in a new tab) · lists.apache.org (opens in a new tab) · lists.apache.org (opens in a new tab) · lists.apache.org (opens in a new tab) · lists.apache.org (opens in a new tab) · lists.apache.org (opens in a new tab) · lists.apache.org (opens in a new tab) · lists.apache.org (opens in a new tab) · lists.apache.org (opens in a new tab) · lists.apache.org (opens in a new tab) · lists.apache.org (opens in a new tab) · lists.apache.org (opens in a new tab)
- CVE record: cve.org (opens in a new tab) · cve.org (opens in a new tab) · cve.org (opens in a new tab) · cve.org (opens in a new tab) · cve.org (opens in a new tab) · cve.org (opens in a new tab) · cve.org (opens in a new tab) · cve.org (opens in a new tab) · cve.org (opens in a new tab) · cve.org (opens in a new tab) · cve.org (opens in a new tab) · cve.org (opens in a new tab)
Times
First published
First seen