Skip to content
OpenAdvisories
Medium WID-SEC-2026-4332 12 CVEs

Apache OpenOffice: Mehrere Schwachstellen

Published Nov 3, 2026 · Updated Nov 4, 2026 · Revision 2 · de-DE

Vendor: Apache Product: OpenOffice Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Apache OpenOffice ausnutzen, um beliebigen Programmcode auszuführen, einen Denial of Service zu verursachen oder Informationen offenzulegen.

Product

OpenOffice ist ein OpenSource Programmpaket von Apache mit zahlreichen Office-Anwendugen. Es enthält Programme zur Textverarbeitung, Tabellenkalkulation, Präsentation, Zeichnungen sowie eine Datenbank.

Vulnerabilities 12

  • High 7.8
    CVE-2026-59264

    Apache OpenOffice: Uncontrolled search path element vulnerability in Windows installer

    The Windows installers of Apache OpenOffice 4.1.16 and earlier allow an already manipulated system to run external code with elevated access. Users are recommended to upgrade to version 4.1.17, which fixes this issue.

    Apache Software Foundation Apache OpenOffice
  • High 7.3
    CVE-2026-59268

    Apache OpenOffice: Heap out-of-bounds write in WW8 PLCF reader

    An out-of-bounds Write vulnerability in Apache OpenOffice versions through 4.1.16 could allow an attacker to craft a Microsoft Word document that would crash the program, or otherwise corrupt other memory areas. Users are recommended to upgrade to version 4.1…

    Apache Software Foundation Apache OpenOffice
  • High 7.3
    CVE-2026-90624

    Apache OpenOffice: PDF File Parsing Heap based Buffer-Overflow-Remote Code Execution Vulnerability

    An unchecked memory access in the PDF import code of Apache OpenOffice versions through 4.1.16 on allows a crafted PDF to execute an out-of-bounds memory write. This could crash the program or cause memory corruption. Users are recommended to upgrade to versi…

    Apache Software Foundation Apache OpenOffice
  • High 7.3
    CVE-2026-90626

    Apache OpenOffice: Out-of-bounds write when importing encrypted PDF files

    An uncontrolled memory access in the PDF import code of Apache OpenOffice versions through 4.1.16 allows a crafted PDF to cause an out-of-bounds memory write, causing program crash or memory corruption. Users are recommended to upgrade to version 4.1.17, whic…

    Apache Software Foundation Apache OpenOffice
  • High 7.3
    CVE-2026-90628

    Apache OpenOffice: Stack overflow in CFF hint handling

    An uncontrolled memory access in the PDF export code of Apache OpenOffice versions through 4.1.16 allows a crafted CFF font to cause a stack overflow problem, causing program crash or memory corruption, or even running other code. Users are recommended to upg…

    Apache Software Foundation Apache OpenOffice
  • High 7.3
    CVE-2026-90629

    Apache OpenOffice: Out of bounds memory access during WMF import

    An uncontrolled memory access in the WMF import code of Apache OpenOffice versions through 4.1.16 allows a crafted WMF file to cause an invalid memory access, causing program crash or memory corruption. Users are recommended to upgrade to version 4.1.17, whic…

    Apache Software Foundation Apache OpenOffice
  • High 7.3
    CVE-2026-90634

    Apache OpenOffice: Out-of-bounds write when importing encrypted PDF files

    An uncontrolled memory access in the PDF import code of Apache OpenOffice versions through 4.1.16 allows a crafted PDF to cause an out-of-bounds memory write, causing program crash or memory corruption. Users are recommended to upgrade to version 4.1.17, whic…

    Apache Software Foundation Apache OpenOffice
  • Medium 5.8
    CVE-2026-59267

    Apache OpenOffice: Heap Buffer Overflow in DXF LWPOLYLINE import could cause memory corruption

    A crafted DXF document causes a heap buffer overflow in Draw in Apache OpenOffice 4.1.16 and earlier. This could cause a crash or otherwise a corruption of memory areas. Users are recommended to upgrade to version 4.1.17, which fixes this issue.

    Apache Software Foundation Apache OpenOffice
  • Medium 5.5
    CVE-2026-90627

    Apache OpenOffice: Local file inclusion via SQL provider and flat file database references

    The flat file database driver in Apache Openoffice versions through 4.1.16 allows a crafted document to read the contents of any local file without asking the user. Users are recommended to upgrade to version 4.1.17, which fixes this issue.

    Apache Software Foundation Apache OpenOffice
  • Medium 5.5
    CVE-2026-90632

    Apache OpenOffice: Local file inclusion via GStreamer plugin

    Apache OpenOffice documents can include multimedia content (audio, video, etc.) A crafted document could exploit the GStreamer multimedia component of Apache OpenOffice version through 4.1.16 to load the contents of any local file, and include them when the d…

    Apache Software Foundation Apache OpenOffice
  • Low 3.3
    CVE-2026-90631

    Apache OpenOffice: Remote document loaded without prompt, possibiy leaking environment variables

    Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt, possibly transferring the contents of environment va…

    Apache Software Foundation Apache OpenOffice
  • Low 1.9
    CVE-2026-59263

    Apache OpenOffice: Carefully crafted documents could display different data when opened with different programs, instead of being reported as corrupt.

    A manipulated document opened in Apache OpenOffice 4.1.16 or earlier may allow substituted content to be displayed manipulating the user. Such documents are corrupt and should not be opened. Users are recommended to upgrade to version 4.1.17, which fixes this…

    Apache Software Foundation Apache OpenOffice

Revision history

  1. #2

    Referenz(en) aufgenommen: EUVD-2026-116872, EUVD-2026-116882, EUVD-2026-116881, EUVD-2026-116880, EUVD-2026-116878, EUVD-2026-116879, EUVD-2026-116876, EUVD-2026-116877, EUVD-2026-116874, EUVD-2026-116875, EUVD-2026-116871, EUVD-2026-116873

  2. #1

    Initiale Fassung

References