Non notée
CVE-2026-90627 Apache OpenOffice: Local file inclusion via SQL provider and flat file database references
Description
The flat file database driver in Apache Openoffice versions through 4.1.16 allows a crafted document to read the contents of any local file without asking the user. Users are recommended to upgrade to version 4.1.17, which fixes this issue.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Apache OpenOffice 4.1 | premières → 4.1.16 | Pas de correctif indiqué |
Références
- lists.apache.org lists.apache.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de Apache OpenOffice
Les 39 CVE de Apache OpenOffice →
CVE-2026-59267
Apache OpenOffice: Heap Buffer Overflow in DXF LWPOLYLINE import could cause memory corruption
5.8
Moyenne
CVE-2026-90632
Apache OpenOffice: Local file inclusion via GStreamer plugin
Non notée
CVE-2026-90634
Apache OpenOffice: Out-of-bounds write when importing encrypted PDF files
Non notée
CVE-2026-90631
Apache OpenOffice: Remote document loaded without prompt, possibiy leaking environment variables
Non notée