CVE-2026-59263lowCWE-349

CVE-2026-59263: low-severity vulnerability in Apache OpenOffice

Apache OpenOffice: Carefully crafted documents could display different data when opened with different programs, instead of being reported as corrupt.

Published

Follow this CVE+ Monitor Apache OpenOffice

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 1.9epss 0.2%
A manipulated document opened in Apache OpenOffice 4.1.16 or earlier may allow substituted content to be displayed manipulating the user. Such documents are corrupt and should not be opened. Users are recommended to upgrade to version 4.1.17, which fixes this issue.
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:L/SI:L/SA:N/E:P/S:P/AU:N/R:A/U:Green
Affected products
Apache Software Foundation · Apache OpenOffice
Related CVEs — Apache OpenOffice

In the same product, most dangerous first.

CVE-2021-33035—Buffer overflow from a crafted DBF fileEPSS 50.6%CVE-2021-30245—Code execution in Apache OpenOffice via non-http(s) schemes in HyperlinksEPSS 4.9%CVE-2021-40439—Billion LaughsEPSS 3.9%CVE-2017-3157—CVE-2017-3157EPSS 3.1%CVE-2016-6804—CVE-2016-6804EPSS 3.0%CVE-2017-12608—CVE-2017-12608EPSS 2.9%