Apache Software Foundation Openoffice vulnerabilities

• apache openoffice Apache OpenOffice: Heap Buffer Overflow in DXF LWPOLYLINE import could cause memory corruption CVE-2026-59267 5.8 MediumNovember 4, 2026
• apache openoffice Apache OpenOffice: Local file inclusion via GStreamer plugin CVE-2026-90632 5.5 MediumNovember 4, 2026
• apache openoffice Apache OpenOffice: Out-of-bounds write when importing encrypted PDF files CVE-2026-90634 7.3 HighNovember 4, 2026
• apache openoffice Apache OpenOffice: Remote document loaded without prompt, possibiy leaking environment variables CVE-2026-90631 3.3 LowNovember 4, 2026
• apache openoffice Apache OpenOffice: Out of bounds memory access during WMF import CVE-2026-90629 7.3 HighNovember 4, 2026
• apache openoffice Apache OpenOffice: Stack overflow in CFF hint handling CVE-2026-90628 7.3 HighNovember 4, 2026
• apache openoffice Apache OpenOffice: Local file inclusion via SQL provider and flat file database references CVE-2026-90627 5.5 MediumNovember 4, 2026
• apache openoffice Apache OpenOffice: Out-of-bounds write when importing encrypted PDF files CVE-2026-90626 7.3 HighNovember 4, 2026
• apache openoffice Apache OpenOffice: PDF File Parsing Heap based Buffer-Overflow-Remote Code Execution Vulnerability CVE-2026-90624 7.3 HighNovember 4, 2026
• apache openoffice Apache OpenOffice: Heap out-of-bounds write in WW8 PLCF reader CVE-2026-59268 7.3 HighNovember 4, 2026
• apache openoffice Apache OpenOffice: Uncontrolled search path element vulnerability in Windows installer CVE-2026-59264 7.8 HighNovember 4, 2026
• apache openoffice Apache OpenOffice: Carefully crafted documents could display different data when opened with different programs, instead of being reported as corrupt. CVE-2026-59263 1.9 LowNovember 4, 2026
• apache software foundation openoffice Apache OpenOffice, Apache OpenOffice: Opening a malicious document can lead to system takeover CVE-2026-59265 Public exploit 8.8 HighOctober 2, 2026
• apache openoffice Apache OpenOffice: URL fetching can be used to exfiltrate arbitrary INI file values and environment variables CVE-2025-64407 5.3 MediumNovember 12, 2025
• apache openoffice Apache OpenOffice: Possible memory corruption during CSV import CVE-2025-64406 4.3 MediumNovember 12, 2025
• apache openoffice Apache OpenOffice: Remote documents loaded without prompt via DDE function CVE-2025-64405 7.5 HighNovember 12, 2025
• apache openoffice Apache OpenOffice: Remote documents loaded without prompt via background and bullet images CVE-2025-64404 7.5 HighNovember 12, 2025
• apache openoffice Apache OpenOffice: Remote documents loaded without prompt via "external data sources" in Calc CVE-2025-64403 8.1 HighNovember 12, 2025
• apache openoffice Apache OpenOffice: Remote documents loaded without prompt via OLE objects CVE-2025-64402 6.5 MediumNovember 12, 2025
• apache openoffice Apache OpenOffice: Remote documents loaded without prompt via IFrame CVE-2025-64401 7.5 HighNovember 12, 2025
• apache openoffice Apache OpenOffice: Macro URL arbitrary script execution CVE-2023-47804 8.8 HighDecember 29, 2023
• apache openoffice Apache OpenOffice: Macro URL arbitrary script execution CVE-2022-47502 7.8 HighMarch 24, 2023
• apache openoffice Apache OpenOffice: Empty entry in Java class path CVE-2022-38745 Fix available 7.8 HighMarch 24, 2023
• apache openoffice Apache OpenOffice Weak Master Keys CVE-2022-37401 8.8 HighAugust 13, 2022
• apache openoffice Apache OpenOffice Static Initialization Vector Allows to Recover Passwords for Web Connections Without Knowing the Master Password CVE-2022-37400 8.8 HighAugust 13, 2022
• apache openoffice Content Manipulation with Certificate Validation Attack CVE-2021-41832 7.5 HighOctober 11, 2021
• apache openoffice Timestamp Manipulation with Signature Wrapping CVE-2021-41831 5.3 MediumOctober 11, 2021
• apache openoffice Double Certificate Attack CVE-2021-41830 7.5 HighOctober 11, 2021
• apache openoffice Billion Laughs CVE-2021-40439 6.5 MediumOctober 7, 2021
• apache openoffice DEB packaging for Apache OpenOffice 4.1.8 installed with a non-root userid and groupid CVE-2021-28129 7.8 HighOctober 7, 2021
• apache openoffice Buffer overflow from a crafted DBF file CVE-2021-33035 Fix available EPSS 50.6% 7.8 HighSeptember 23, 2021
• apache openoffice Code execution in Apache OpenOffice via non-http(s) schemes in Hyperlinks CVE-2021-30245 8.8 HighApril 15, 2021
• apache openoffice A vulnerability in Apache OpenOffice scripting events allows an attacker to construct documents... CVE-2020-13958 Public exploit 7.8 HighNovember 17, 2020
• apache openoffice, canonical ubuntu linux +1 more When loading a document with Apache Open Office 4.1.5 and earlier with smaller end line... CVE-2018-11790 Fix available 7.8 HighDecember 31, 2018
• apache openoffice A vulnerability in the OpenOffice Writer DOC file parser before 4.1.4, and specifically in the... CVE-2017-9806 Fix available 7.8 HighNovember 20, 2017
• apache openoffice The Apache OpenOffice installer (versions prior to 4.1.3, including some branded as OpenOffice... CVE-2016-6804 7.8 HighNovember 20, 2017
• apache openoffice An installer defect known as an "unquoted Windows search path vulnerability" affected the Apache... CVE-2016-6803 7.8 HighNovember 13, 2017
• apache openoffice, debian linux +1 more A vulnerability in Apache OpenOffice Writer DOC file parser before 4.1.4, and specifically in... CVE-2017-12608 Fix available 7.8 HighNovember 1, 2017
• apache openoffice, debian linux +1 more A vulnerability in OpenOffice's PPT file parser before 4.1.4, and specifically in PPTStyleSheet,... CVE-2017-12607 Fix available 7.8 HighNovember 1, 2017
• apache openoffice, debian linux, redhat enterprise linux desktop +5 more +7 more By exploiting the way Apache OpenOffice before 4.1.4 renders embedded objects, an attacker could... CVE-2017-3157 Fix available 5.5 MediumFebruary 22, 2017