apache openoffice vulnerabilities (CVE)

CVE records published for apache openoffice, newest first. Follow to get an email when a new one appears.

19 results
5.5Medium
CVE-2026-90632

Apache OpenOffice: Local file inclusion via GStreamer plugin

Apache Software Foundation Apache OpenOffice

Apache OpenOffice documents can include multimedia content (audio, video, etc.) A crafted document could exploit the GStreamer multimedia component of Apache OpenOffice version through 4.1.16 to load the contents of any local file, and include them when the …

7.3High
CVE-2026-90629

Apache OpenOffice: Out of bounds memory access during WMF import

Apache Software Foundation Apache OpenOffice

An uncontrolled memory access in the WMF import code of Apache OpenOffice versions through 4.1.16 allows a crafted WMF file to cause an invalid memory access, causing program crash or memory corruption. Users are recommended to upgrade to version 4.1.17, whic…

7.3High
CVE-2026-90628

Apache OpenOffice: Stack overflow in CFF hint handling

Apache Software Foundation Apache OpenOffice

An uncontrolled memory access in the PDF export code of Apache OpenOffice versions through 4.1.16 allows a crafted CFF font to cause a stack overflow problem, causing program crash or memory corruption, or even running other code. Users are recommended to up…

7.3High
CVE-2026-59268

Apache OpenOffice: Heap out-of-bounds write in WW8 PLCF reader

Apache Software Foundation Apache OpenOffice

An out-of-bounds Write vulnerability in Apache OpenOffice versions through 4.1.16 could allow an attacker to craft a Microsoft Word document that would crash the program, or otherwise corrupt other memory areas. Users are recommended to upgrade to version 4.…

4.3Medium
CVE-2025-64406

Apache OpenOffice: Possible memory corruption during CSV import

Apache Software Foundation Apache OpenOffice

An out-of-bounds Write vulnerability in Apache OpenOffice could allow an attacker to craft a document that would crash the program, or otherwise corrupt other memory areas. This issue affects Apache OpenOffice: through 4.1.15. Users are recommended to upgra…

7.5High
CVE-2025-64401

Apache OpenOffice: Remote documents loaded without prompt via IFrame

Apache Software Foundation Apache OpenOffice

Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. In the affected versions of Apache OpenOffice, docu…