Advisories · Technology

Apache Software Foundation Apache OpenOffice.

Every CVE that names Apache Software Foundation Apache OpenOffice among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-59267 CVE record

CVSS 5.8 Medium

Apache OpenOffice: Heap Buffer Overflow in DXF LWPOLYLINE import could cause memory corruption
- Apache Software Foundation Apache OpenOffice
- Memory corruption
Not analysed yet 4 Nov 2026
CVE-2026-90632 CVE record

Apache OpenOffice: Local file inclusion via GStreamer plugin
- Apache Software Foundation Apache OpenOffice
- Information disclosure
Not analysed yet 4 Nov 2026
CVE-2026-90634 CVE record

CVSS 7.3 High

Apache OpenOffice: Out-of-bounds write when importing encrypted PDF files
- Apache Software Foundation Apache OpenOffice
- Memory corruption
Not analysed yet 4 Nov 2026
CVE-2026-90631 CVE record

CVSS 3.3 Low

Apache OpenOffice: Remote document loaded without prompt, possibiy leaking environment variables
- Apache Software Foundation Apache OpenOffice
- CWE-939
Not analysed yet 4 Nov 2026
CVE-2026-90629 CVE record

CVSS 7.3 High

Apache OpenOffice: Out of bounds memory access during WMF import
- Apache Software Foundation Apache OpenOffice
- Memory corruption
Not analysed yet 4 Nov 2026
CVE-2026-90628 CVE record

CVSS 7.3 High

Apache OpenOffice: Stack overflow in CFF hint handling
- Apache Software Foundation Apache OpenOffice
- Memory corruption
Not analysed yet 4 Nov 2026
CVE-2026-90627 CVE record

CVSS 5.5 Medium

Apache OpenOffice: Local file inclusion via SQL provider and flat file database references
- Apache Software Foundation Apache OpenOffice
- Information disclosure
Not analysed yet 4 Nov 2026
CVE-2026-90626 CVE record

CVSS 7.3 High

Apache OpenOffice: Out-of-bounds write when importing encrypted PDF files
- Apache Software Foundation Apache OpenOffice
- Memory corruption
Not analysed yet 4 Nov 2026
CVE-2026-90624 CVE record

CVSS 7.3 High

Apache OpenOffice: PDF File Parsing Heap based Buffer-Overflow-Remote Code Execution Vulnerability
- Apache Software Foundation Apache OpenOffice
- Memory corruption
Not analysed yet 4 Nov 2026
CVE-2026-59268 CVE record

CVSS 7.3 High

Apache OpenOffice: Heap out-of-bounds write in WW8 PLCF reader
- Apache Software Foundation Apache OpenOffice
- Memory corruption
Not analysed yet 4 Nov 2026
CVE-2026-59264 CVE record

CVSS 7.8 High

Apache OpenOffice: Uncontrolled search path element vulnerability in Windows installer
- Apache Software Foundation Apache OpenOffice
- CWE-427
Not analysed yet 4 Nov 2026
CVE-2026-59263 CVE record

CVSS 1.9 Low

Apache OpenOffice: Carefully crafted documents could display different data when opened with different programs, instead of being reported as corrupt.
- Apache Software Foundation Apache OpenOffice
- CWE-349
Not analysed yet 4 Nov 2026
CVE-2026-59265 CVE record

CVSS 8.8 High

Apache OpenOffice, Apache OpenOffice: Opening a malicious document can lead to system takeover
- Apache Software Foundation Apache OpenOffice
- CWE-426
Not analysed yet 2 Oct 2026
CVE-2025-64407 CVE record

CVSS 5.3 Medium

Apache OpenOffice: URL fetching can be used to exfiltrate arbitrary INI file values and environment variables
- Apache Software Foundation Apache OpenOffice
- Information disclosure
- Broken access control
Not analysed yet 12 Nov 2025
CVE-2025-64406 CVE record

CVSS 4.3 Medium

Apache OpenOffice: Possible memory corruption during CSV import
- Apache Software Foundation Apache OpenOffice
- Memory corruption
Not analysed yet 12 Nov 2025
CVE-2025-64405 CVE record

CVSS 7.5 High

Apache OpenOffice: Remote documents loaded without prompt via DDE function
- Apache Software Foundation Apache OpenOffice
- Broken access control
Not analysed yet 12 Nov 2025
CVE-2025-64404 CVE record

CVSS 7.5 High

Apache OpenOffice: Remote documents loaded without prompt via background and bullet images
- Apache Software Foundation Apache OpenOffice
- Broken access control
Not analysed yet 12 Nov 2025
CVE-2025-64403 CVE record

CVSS 8.1 High

Apache OpenOffice: Remote documents loaded without prompt via "external data sources" in Calc
- Apache Software Foundation Apache OpenOffice
- Broken access control
Not analysed yet 12 Nov 2025
CVE-2025-64402 CVE record

CVSS 6.5 Medium

Apache OpenOffice: Remote documents loaded without prompt via OLE objects
- Apache Software Foundation Apache OpenOffice
- Broken access control
Not analysed yet 12 Nov 2025
CVE-2025-64401 CVE record

CVSS 7.5 High

Apache OpenOffice: Remote documents loaded without prompt via IFrame
- Apache Software Foundation Apache OpenOffice
- Broken access control
Not analysed yet 12 Nov 2025
CVE-2023-47804 CVE record

Apache OpenOffice: Macro URL arbitrary script execution
- Apache Software Foundation Apache OpenOffice
- Command injection
- CWE-20
Not analysed yet 29 Dec 2023
CVE-2022-47502 CVE record

Apache OpenOffice: Macro URL arbitrary script execution
- Apache Software Foundation Apache OpenOffice
- Command injection
- CWE-20
Not analysed yet 24 Mar 2023
CVE-2022-38745 CVE record

CVSS 7.8 High

Apache OpenOffice: Empty entry in Java class path
- Apache Software Foundation Apache OpenOffice
- Code injection
- CWE-427
Not analysed yet 24 Mar 2023
CVE-2022-37401 CVE record

Apache OpenOffice Weak Master Keys
- Apache Software Foundation Apache OpenOffice
- CWE-331
Not analysed yet 13 Aug 2022
CVE-2022-37400 CVE record

Apache OpenOffice Static Initialization Vector Allows to Recover Passwords for Web Connections Without Knowing the Master Password
- Apache Software Foundation Apache OpenOffice
- Weak cryptography or TLS
Not analysed yet 13 Aug 2022
CVE-2021-41832 CVE record

Content Manipulation with Certificate Validation Attack
- Apache Software Foundation Apache OpenOffice
- Weak cryptography or TLS
Not analysed yet 11 Oct 2021
CVE-2021-41831 CVE record

Timestamp Manipulation with Signature Wrapping
- Apache Software Foundation Apache OpenOffice
- Weak cryptography or TLS
Not analysed yet 11 Oct 2021
CVE-2021-41830 CVE record

Double Certificate Attack
- Apache Software Foundation Apache OpenOffice
- Weak cryptography or TLS
Not analysed yet 11 Oct 2021
CVE-2021-40439 CVE record

Billion Laughs
- Apache Software Foundation Apache OpenOffice
- XML external entities (XXE)
Not analysed yet 7 Oct 2021
CVE-2021-28129 CVE record

DEB packaging for Apache OpenOffice 4.1.8 installed with a non-root userid and groupid
- Apache Software Foundation Apache OpenOffice
- Broken access control
Not analysed yet 7 Oct 2021
CVE-2021-33035 CVE record

Buffer overflow from a crafted DBF file
- Apache Software Foundation Apache OpenOffice
- Memory corruption
Not analysed yet 23 Sept 2021
CVE-2021-30245 CVE record

Code execution in Apache OpenOffice via non-http(s) schemes in Hyperlinks
- Apache Software Foundation Apache OpenOffice
Not analysed yet 15 Apr 2021
CVE-2018-11790 CVE record

When loading a document with Apache Open Office 4.1.5 and earlier with smaller end line termination than the operating system uses, the defect occurs.
- Apache Software Foundation Apache OpenOffice
Not analysed yet 31 Jan 2019
CVE-2017-3157 CVE record

Apache Software Foundation Apache OpenOffice: By exploiting the way Apache OpenOffice before 4.1.4 renders embedded objects…
- Apache Software Foundation Apache OpenOffice
Not analysed yet 20 Nov 2017
CVE-2017-12608 CVE record

Apache Software Foundation Apache OpenOffice: A vulnerability in Apache OpenOffice Writer DOC file parser before 4.1.4…
- Apache Software Foundation Apache OpenOffice
Not analysed yet 20 Nov 2017
CVE-2017-12607 CVE record

A vulnerability in OpenOffice's PPT file parser before 4.1.4, and specifically in PPTStyleSheet, allows attackers to craft malicious documents that cause denial of service (memory corruption and appl…
- Apache Software Foundation Apache OpenOffice
Not analysed yet 20 Nov 2017
CVE-2017-9806 CVE record

A vulnerability in the OpenOffice Writer DOC file parser before 4.1.4, and specifically in the WW8Fonts Constructor, allows attackers to craft malicious documents that cause denial of service (memory…
- Apache Software Foundation Apache OpenOffice
Not analysed yet 20 Nov 2017
CVE-2016-6804 CVE record

Apache Software Foundation Apache OpenOffice: The Apache OpenOffice installer (versions prior to 4.1.3…
- Apache Software Foundation Apache OpenOffice
Not analysed yet 20 Nov 2017
CVE-2016-6803 CVE record

Apache Software Foundation Apache OpenOffice: An installer defect known as an "unquoted Windows search path vulnerability" affected the…
- Apache Software Foundation Apache OpenOffice
Not analysed yet 13 Nov 2017