CVE-2026-59265

A code execution issue in the Java integration in Apache OpenOffice v4.1.16 and earlier allows a crafted untrusted document to trigger executing arbitrary even remote code when opened by the user. This issue is expected to be fixed in version 4.1.17, which is in the release candidate phase. Until...

CVE-2026-59265

Apache OpenOffice v4.1.16 and earlier are vulnerable to a code execution issue within the Java integration . A specially crafted untrusted document can trigger the execution of arbitrary code, including remote code, when opened by a user. To mitigate this risk, users should disable Java runtime i...

CVE-2026-59265 Apache OpenOffice, Apache OpenOffice: Opening a malicious document can lead to system takeover

A code execution issue in the Java integration in Apache OpenOffice v4.1.16 and earlier allows a crafted untrusted document to trigger executing arbitrary even remote code when opened by the user. This issue is expected to be fixed in version 4.1.17, which is in the release candidate phase. Until...

CVE-2026-59265 Apache OpenOffice, Apache OpenOffice: Opening a malicious document can lead to system takeover

A code execution issue in the Java integration in Apache OpenOffice v4.1.16 and earlier allows a crafted untrusted document to trigger executing arbitrary even remote code when opened by the user. This issue is expected to be fixed in version 4.1.17, which is in the release candidate phase. Until...

EUVD-2026-91764

A code execution issue in the Java integration in Apache OpenOffice v4.1.16 and earlier allows a crafted untrusted document to trigger executing arbitrary even remote code when opened by the user. This issue is expected to be fixed in version 4.1.17, which is in the release candidate phase. Until...

PT-2026-104411

Name of the Vulnerable Software and Affected Versions Apache OpenOffice versions prior to 4.1.17 Description A code execution issue exists in the Java integration of the software. A crafted untrusted document can trigger the execution of arbitrary code, including remote code, when opened by a use...

AlmaLinux 9.2 [TuxCare] Security Update: autocorr-af / autocorr-bg / autocorr-ca / autocorr-cs / autocorr-da / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1746190792)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1746190792 advisory. - Apache OpenOffice versions before 4.1.14 may be configured to add an empty entry to the Java class path. This may lead to run...

CVE-2018-10583

CVE-2018-10583 LibreOffice 6.0.3 および Apache OpenOffice Writer 4.1.5 が、悪意のあるファイルに埋め込まれた SMB 接続を自動的に処理して開始する際に発生する情報漏えいの脆弱性です。これは、".odt XML ドキュメント" 内の "office:document-content" 要素内にある "xlink:href=file://192.168.0.2/test.jpg" によって実証されています。 http://bit.ly/2w9mU1n...

CVE-2018-10583

CVE-2018-10583 用に更新された python3 エクスプロイト LibreOffice/Open Office - '.odt' 情報漏えい クレジット元 : https://www.exploit-db.com/exploits/44564 使い方 1. ezodf モジュールを pip または pip3 でインストールします 2. python3 でエクスプロイトを実行すると bad.odt ファイルが生成されるので、それをボックスにアップロードします 3. そして、SMB サーバーへのリクエストをリッスンします: impacket-smbserver share...

Astra Linux – Vulnerability in LibreOffice

Versions of Apache OpenOffice prior to 4.1.14 may be configured to add an empty entry to the Java class path. This may allow for the execution of arbitrary Java code from the current directory...

CVE-2026-46672 Actual: CSV Formula Injection in `@actual-app/cli` `--format csv` Output via Custom `escapeCsv` Helper

Actual is a local-first personal finance app. Prior to 26.6.0, @actual-app/cli ships a hand-rolled CSV serializer in packages/cli/src/output.ts used whenever the global --format csv option is passed, whose escapeCsv helper only handles RFC 4180 delimiter, quote, and newline escaping and does not...

CVE-2021-41830

It is possible for an attacker to manipulate signed documents and macros to appear to come from a trusted source. All versions of Apache OpenOffice up to 4.1.10 are affected. Users are advised to update to version 4.1.11. See CVE-2021-25633 for the LibreOffice advisory...

CVE-2021-33035

Apache OpenOffice opens dBase/DBF documents and shows the contents as spreadsheets. DBF are database files with data organized in fields. When reading DBF data the size of certain fields is not checked: the data is just copied into local variables. A carefully crafted document could overflow the...

CVE-2022-37401

Apache OpenOffice supports the storage of passwords for web connections in the user's configuration database. The stored passwords are encrypted with a single master key provided by the user. A flaw in OpenOffice existed where master key was poorly encoded resulting in weakening its entropy from...

CVE-2022-26874

lib/Horde/Mime/Viewer/Ooo.php in Horde MimeViewer before 2.2.4 allows XSS via an OpenOffice document, leading to account takeover in Horde Groupware Webmail Edition. This occurs after XSLT rendering...

The vulnerability of the Apache OpenOffice office software package, related to the lack of authentication, allows attackers to circumvent existing security restrictions.

The vulnerability of the Apache OpenOffice office software is related to the lack of authentication. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions through a specially created file...

The vulnerability of the Apache OpenOffice office software package, related to the lack of authentication, allows attackers to circumvent existing security restrictions.

The vulnerability of the Apache OpenOffice office software is related to the lack of authentication. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions through a specially created file...

The vulnerability of the Apache OpenOffice office software package, related to the lack of authentication, allows a perpetrator to trigger a service failure.

The vulnerability of the Apache OpenOffice office software is related to the lack of authentication. Exploiting this vulnerability can allow a malicious actor to cause a service failure through a specially created file...

The vulnerability of the Apache OpenOffice office software, related to the lack of authentication, allows attackers to circumvent existing restrictions by downloading specially created files.

The vulnerability of the Apache OpenOffice office software package is related to the lack of authentication. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions by downloading specially created files...

The vulnerability of the Apache OpenOffice office software package, related to the lack of authentication, allows attackers to circumvent existing security restrictions.

The vulnerability of the Apache OpenOffice office software is related to the lack of authentication. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions through a specially created file...