CVE-2026-59264Apache OpenOffice: Uncontrolled search path element vulnerability in Windows installer

Descripción

The Windows installers of Apache OpenOffice 4.1.16 and earlier allow an already manipulated system to run external code with elevated access. Users are recommended to upgrade to version 4.1.17, which fixes this issue.

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

Referencias y parches

• https://lists.apache.org/thread.html/d4n33sjk8jgrr78jj5cq5r51fvxv6nnv vendor-advisoryMailing ListVendor Advisory
• http://www.openwall.com/lists/oss-security/2026/11/03/22 Mailing ListThird Party Advisory