Apache Openoffice vulnerabilities

• apache openoffice Apache OpenOffice: Heap Buffer Overflow in DXF LWPOLYLINE import could cause memory corruption CVE-2026-59267 5.8 MediumNovember 4, 2026
• apache openoffice Apache OpenOffice: Local file inclusion via GStreamer plugin CVE-2026-90632 5.5 MediumNovember 4, 2026
• apache openoffice Apache OpenOffice: Out-of-bounds write when importing encrypted PDF files CVE-2026-90634 7.3 HighNovember 4, 2026
• apache openoffice Apache OpenOffice: Remote document loaded without prompt, possibiy leaking environment variables CVE-2026-90631 3.3 LowNovember 4, 2026
• apache openoffice Apache OpenOffice: Out of bounds memory access during WMF import CVE-2026-90629 7.3 HighNovember 4, 2026
• apache openoffice Apache OpenOffice: Stack overflow in CFF hint handling CVE-2026-90628 7.3 HighNovember 4, 2026
• apache openoffice Apache OpenOffice: Local file inclusion via SQL provider and flat file database references CVE-2026-90627 5.5 MediumNovember 4, 2026
• apache openoffice Apache OpenOffice: Out-of-bounds write when importing encrypted PDF files CVE-2026-90626 7.3 HighNovember 4, 2026
• apache openoffice Apache OpenOffice: PDF File Parsing Heap based Buffer-Overflow-Remote Code Execution Vulnerability CVE-2026-90624 7.3 HighNovember 4, 2026
• apache openoffice Apache OpenOffice: Heap out-of-bounds write in WW8 PLCF reader CVE-2026-59268 7.3 HighNovember 4, 2026
• apache openoffice Apache OpenOffice: Uncontrolled search path element vulnerability in Windows installer CVE-2026-59264 7.8 HighNovember 4, 2026
• apache openoffice Apache OpenOffice: Carefully crafted documents could display different data when opened with different programs, instead of being reported as corrupt. CVE-2026-59263 1.9 LowNovember 4, 2026
• apache openoffice Apache OpenOffice: URL fetching can be used to exfiltrate arbitrary INI file values and environment variables CVE-2025-64407 5.3 MediumNovember 12, 2025
• apache openoffice Apache OpenOffice: Possible memory corruption during CSV import CVE-2025-64406 4.3 MediumNovember 12, 2025
• apache openoffice Apache OpenOffice: Remote documents loaded without prompt via DDE function CVE-2025-64405 7.5 HighNovember 12, 2025
• apache openoffice Apache OpenOffice: Remote documents loaded without prompt via background and bullet images CVE-2025-64404 7.5 HighNovember 12, 2025
• apache openoffice Apache OpenOffice: Remote documents loaded without prompt via "external data sources" in Calc CVE-2025-64403 8.1 HighNovember 12, 2025
• apache openoffice Apache OpenOffice: Remote documents loaded without prompt via OLE objects CVE-2025-64402 6.5 MediumNovember 12, 2025
• apache openoffice Apache OpenOffice: Remote documents loaded without prompt via IFrame CVE-2025-64401 7.5 HighNovember 12, 2025
• apache openoffice Apache OpenOffice: Macro URL arbitrary script execution CVE-2023-47804 8.8 HighDecember 29, 2023
• apache openoffice Apache OpenOffice: Macro URL arbitrary script execution CVE-2022-47502 7.8 HighMarch 24, 2023
• apache openoffice Apache OpenOffice: Empty entry in Java class path CVE-2022-38745 Fix available 7.8 HighMarch 24, 2023
• apache openoffice Apache OpenOffice Weak Master Keys CVE-2022-37401 8.8 HighAugust 13, 2022
• apache openoffice Apache OpenOffice Static Initialization Vector Allows to Recover Passwords for Web Connections Without Knowing the Master Password CVE-2022-37400 8.8 HighAugust 13, 2022
• apache openoffice Content Manipulation with Certificate Validation Attack CVE-2021-41832 7.5 HighOctober 11, 2021
• apache openoffice Timestamp Manipulation with Signature Wrapping CVE-2021-41831 5.3 MediumOctober 11, 2021
• apache openoffice Double Certificate Attack CVE-2021-41830 7.5 HighOctober 11, 2021
• apache openoffice Billion Laughs CVE-2021-40439 6.5 MediumOctober 7, 2021
• apache openoffice DEB packaging for Apache OpenOffice 4.1.8 installed with a non-root userid and groupid CVE-2021-28129 7.8 HighOctober 7, 2021
• apache openoffice Buffer overflow from a crafted DBF file CVE-2021-33035 Fix available EPSS 50.6% 7.8 HighSeptember 23, 2021
• apache openoffice Code execution in Apache OpenOffice via non-http(s) schemes in Hyperlinks CVE-2021-30245 8.8 HighApril 15, 2021
• apache openoffice A vulnerability in Apache OpenOffice scripting events allows an attacker to construct documents... CVE-2020-13958 Public exploit 7.8 HighNovember 17, 2020
• apache openoffice, libreoffice, debian linux +1 more +3 more LibreOffice and OpenOffice automatically open embedded content CVE-2012-5639 6.5 MediumDecember 20, 2019
• apache openoffice, openoffice.org +1 more OpenOffice.org v3.3 allows execution of arbitrary code with the privileges of the user running... CVE-2011-2177 7.8 HighNovember 27, 2019
• apache openoffice, canonical ubuntu linux +1 more When loading a document with Apache Open Office 4.1.5 and earlier with smaller end line... CVE-2018-11790 Fix available 7.8 HighDecember 31, 2018
• apache openoffice, libreoffice, canonical ubuntu linux +4 more +6 more An information disclosure vulnerability occurs when LibreOffice 6.0.3 and Apache OpenOffice... CVE-2018-10583 Public exploitFix available EPSS 78.0% 7.5 HighMay 1, 2018
• apache openoffice A vulnerability in the OpenOffice Writer DOC file parser before 4.1.4, and specifically in the... CVE-2017-9806 Fix available 7.8 HighNovember 20, 2017
• apache openoffice The Apache OpenOffice installer (versions prior to 4.1.3, including some branded as OpenOffice... CVE-2016-6804 7.8 HighNovember 20, 2017
• apache openoffice An installer defect known as an "unquoted Windows search path vulnerability" affected the Apache... CVE-2016-6803 7.8 HighNovember 13, 2017
• apache openoffice, debian linux +1 more A vulnerability in Apache OpenOffice Writer DOC file parser before 4.1.4, and specifically in... CVE-2017-12608 Fix available 7.8 HighNovember 1, 2017
• apache openoffice, debian linux +1 more A vulnerability in OpenOffice's PPT file parser before 4.1.4, and specifically in PPTStyleSheet,... CVE-2017-12607 Fix available 7.8 HighNovember 1, 2017
• apache openoffice, debian linux, redhat enterprise linux desktop +5 more +7 more By exploiting the way Apache OpenOffice before 4.1.4 renders embedded objects, an attacker could... CVE-2017-3157 Fix available 5.5 MediumFebruary 22, 2017
• apache openoffice The Impress tool in Apache OpenOffice 4.1.2 and earlier allows remote attackers to cause a denial... CVE-2016-1513 Fix available 7.8 HighAugust 5, 2016
• apache openoffice, libreoffice, canonical ubuntu linux +1 more +3 more LibreOffice before 4.4.6 and 5.x before 5.0.1 and Apache OpenOffice before 4.1.2 allows remote... CVE-2015-5214 Fix available 6.8 MediumOctober 10, 2015
• apache openoffice, libreoffice, canonical ubuntu linux +1 more +3 more Integer overflow in LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2 allows remote... CVE-2015-5213 Fix available 6.8 MediumOctober 10, 2015
• apache openoffice, libreoffice, canonical ubuntu linux +1 more +3 more Integer underflow in LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2, when the... CVE-2015-5212 Fix available 6.8 MediumOctober 10, 2015
• apache openoffice, libreoffice, canonical ubuntu linux +1 more +3 more LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2 uses the stored LinkUpdateMode... CVE-2015-4551 Fix available EPSS 13.8% 4.3 MediumOctober 10, 2015
• apache openoffice, libreoffice, canonical ubuntu linux +5 more +7 more The HWP filter in LibreOffice before 4.3.7 and 4.4.x before 4.4.2 and Apache OpenOffice before 4... CVE-2015-1774 Fix available 6.8 MediumApril 25, 2015
• apache openoffice, libreoffice, redhat enterprise linux desktop +2 more +4 more The OLE preview generation in Apache OpenOffice before 4.1.1 and OpenOffice.org (OOo) might allow... CVE-2014-3575 Fix available EPSS 11.3% 4.3 MediumAugust 26, 2014
• apache openoffice, libreoffice +1 more Apache OpenOffice before 4.1.1 allows remote attackers to execute arbitrary commands and possibly... CVE-2014-3524 Fix available EPSS 14.1% 9.3 HighAugust 26, 2014
• Show olderLoading…