CVE search · CVE-2026-59264
CVE-2026-59264
high 7.8
The Windows installers of Apache OpenOffice 4.1.16 and earlier allow an already manipulated system to run external code with elevated access. Users are recommended to upgrade to version 4.1.17, which fixes this issue.
Details
- Status
- Analyzed
- Published
- Last changed
- Source
- security@apache.org
- Weakness
- CWE-427
Severity
| Version | Score | Vector | Source |
|---|---|---|---|
| CVSS 3.1 | high 7.8 | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
134c704f-9b21-4f2e-91b3-4a467353bcc0Secondary |
Affected products
Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.
- apache · openoffice
References
- https://lists.apache.org/thread.html/d4n33sjk8jgrr78jj5cq5r51fvxv6nnvMailing ListVendor Advisory
- http://www.openwall.com/lists/oss-security/2026/11/03/22Mailing ListThird Party Advisory