Skip to content
OpenAdvisories
High · 7.8 CVE-2026-59264 EUVD-2026-116872GHSA-78xp-gm58-q69q

Apache OpenOffice: Uncontrolled search path element vulnerability in Windows installer

Published Nov 4, 2026 · Updated Nov 5, 2026 · Assigned by apache

Description

The Windows installers of Apache OpenOffice 4.1.16 and earlier allow an already manipulated system to run external code with elevated access.
Users are recommended to upgrade to version 4.1.17, which fixes this issue.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache OpenOffice ≤ 4.1.16 —

Advisories 1

References