Skip to content

Vulnerabilities of Apache Software Foundation Apache OpenOffice

Is your version affected?

CVE Summary Score Published
CVE-2026-59267 Apache OpenOffice: Heap Buffer Overflow in DXF LWPOLYLINE import could cause memory corruption 5.8 Medium Nov 4, 2026
CVE-2026-90632 Apache OpenOffice: Local file inclusion via GStreamer plugin Not rated Nov 4, 2026
CVE-2026-90634 Apache OpenOffice: Out-of-bounds write when importing encrypted PDF files Not rated Nov 4, 2026
CVE-2026-90631 Apache OpenOffice: Remote document loaded without prompt, possibiy leaking environment variables Not rated Nov 4, 2026
CVE-2026-90629 Apache OpenOffice: Out of bounds memory access during WMF import Not rated Nov 4, 2026
CVE-2026-90628 Apache OpenOffice: Stack overflow in CFF hint handling Not rated Nov 4, 2026
CVE-2026-90627 Apache OpenOffice: Local file inclusion via SQL provider and flat file database references Not rated Nov 4, 2026
CVE-2026-90626 Apache OpenOffice: Out-of-bounds write when importing encrypted PDF files Not rated Nov 4, 2026
CVE-2026-90624 Apache OpenOffice: PDF File Parsing Heap based Buffer-Overflow-Remote Code Execution Vulnerability Not rated Nov 4, 2026
CVE-2026-59268 Apache OpenOffice: Heap out-of-bounds write in WW8 PLCF reader Not rated Nov 4, 2026
CVE-2026-59264 Apache OpenOffice: Uncontrolled search path element vulnerability in Windows installer Not rated Nov 4, 2026
CVE-2026-59263 Apache OpenOffice: Carefully crafted documents could display different data when opened with different programs, instead of being reported as corrupt. 1.9 Low Nov 4, 2026
CVE-2026-59265 A code execution issue in the Java integration in Apache OpenOffice v4.1.16 and earlier allows a crafted untrusted… Not rated Oct 2, 2026
CVE-2025-64407 Apache OpenOffice documents can contain links Not rated Nov 12, 2025
CVE-2025-64406 An out-of-bounds Write vulnerability in Apache OpenOffice could allow an attacker to craft a document that would crash… Not rated Nov 12, 2025
CVE-2025-64405 Apache OpenOffice documents can contain links Not rated Nov 12, 2025
CVE-2025-64404 Apache OpenOffice documents can contain links to other files Not rated Nov 12, 2025
CVE-2025-64403 Apache OpenOffice Calc spreadsheet can contain links to other files, in the form of "external data sources" Not rated Nov 12, 2025
CVE-2025-64402 Apache OpenOffice documents can contain links Not rated Nov 12, 2025
CVE-2025-64401 Apache OpenOffice documents can contain links Not rated Nov 12, 2025
CVE-2023-47804 Apache OpenOffice documents can contain links that call internal macros with arbitrary arguments Not rated Dec 29, 2023
CVE-2022-47502 Apache OpenOffice documents can contain links that call internal macros with arbitrary arguments Not rated Mar 24, 2023
CVE-2022-38745 Apache OpenOffice versions before 4.1.14 may be configured to add an empty entry to the Java class path Not rated Mar 24, 2023
CVE-2022-37401 Apache OpenOffice supports the storage of passwords for web connections in the user's configuration database Not rated Aug 13, 2022
CVE-2022-37400 Apache OpenOffice supports the storage of passwords for web connections in the user's configuration database Not rated Aug 13, 2022

Other Apache Software Foundation products