Low · 1.9 CVE-2026-59263 EUVD-2026-116871GHSA-ffj4-jpv9-gmgr

Apache OpenOffice: Carefully crafted documents could display different data when opened with different programs, instead of being reported as corrupt.

Published Nov 4, 2026 · Updated Nov 4, 2026 · Assigned by apache

Vendor: Apache Software Foundation Product: Apache OpenOffice

Description

A manipulated document opened in Apache OpenOffice 4.1.16 or earlier may allow substituted content to be displayed manipulating the user. Such documents are corrupt and should not be opened.
Users are recommended to upgrade to version 4.1.17, which fixes this issue.

Affected products

Vendor	Product	Affected	Fixed
Apache Software Foundation	Apache OpenOffice	≤ 4.1.16	—

Advisories 1

WID-SEC-2026-4332 Apache OpenOffice: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 4, 2026

References

https://lists.apache.org/thread.html/drr0ss9wrkq0omlrwjhcm8738pjx3xgd vendor-advisory