CVE-2026-59263Apache OpenOffice: Carefully crafted documents could display different data when opened with different programs, instead of being reported as corrupt.

Description

A manipulated document opened in Apache OpenOffice 4.1.16 or earlier may allow substituted content to be displayed manipulating the user. Such documents are corrupt and should not be opened. Users are recommended to upgrade to version 4.1.17, which fixes this issue.

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

References and patches

• https://lists.apache.org/thread.html/drr0ss9wrkq0omlrwjhcm8738pjx3xgd vendor-advisoryMailing ListVendor Advisory
• http://www.openwall.com/lists/oss-security/2026/11/03/21 Mailing ListThird Party Advisory