CVE-20XX-?

Apache Openoffice CVEs.

Published CVEs affecting Apache Openoffice, ranked by exploit odds.

19 CVEs · updated 2026-11-06 01:19 UTC

  1. CVE-2025-64405

    Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. In the affected versions of Apache OpenOffice, Calc spreadsheet containing DDE links to external files would load the contents of those files without prompting the user for permission to do so. This issue affects Apache OpenOffice: through 4.1.15. Users are recommended to upgrade to version 4.1.16, which fixes the issue.

    Apache Openoffice

    7.5 HIGH 1% exploit odds Fix listed
  2. CVE-2025-64403

    Apache OpenOffice Calc spreadsheet can contain links to other files, in the form of "external data sources". A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause such links to be loaded without prompt. This issue affects Apache OpenOffice: through 4.1.15. Users are recommended to upgrade to version 4.1.16, which fixes the issue.

    Apache Openoffice

    8.1 HIGH 1% exploit odds Fix listed
  3. CVE-2025-64404

    Apache OpenOffice documents can contain links to other files. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. In the affected versions of Apache OpenOffice, documents that used background fill images, or bullet images, linked to external files would load the contents of those files without prompting the user for permission to do so. This issue affects Apache OpenOffice: through 4.1.15. Users are recommended to upgrade to version 4.1.16, which fixes the issue.

    Apache Openoffice

    7.5 HIGH 1% exploit odds Fix listed
  4. CVE-2025-64401

    Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. In the affected versions of Apache OpenOffice, documents that used "floating frames" linked to external files would load the contents of those frames without prompting the user for permission to do so. This issue affects Apache OpenOffice: through 4.1.15. Users are recommended to upgrade to version 4.1.16, which fixes the issue. The LibreOffice suite reported this issue as CVE-2023-2255

    Apache Openoffice

    7.5 HIGH 0.9% exploit odds Fix listed
  5. CVE-2025-64402

    Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. In the affected versions of Apache OpenOffice, documents that used "OLE objects" linked to external files would load the contents of those files without prompting the user for permission to do so. This issue affects Apache OpenOffice: through 4.1.15. Users are recommended to upgrade to version 4.1.16, which fixes the issue.

    Apache Openoffice

    6.5 MEDIUM 0.6% exploit odds Fix listed
  6. CVE-2025-64406

    An out-of-bounds Write vulnerability in Apache OpenOffice could allow an attacker to craft a document that would crash the program, or otherwise corrupt other memory areas. This issue affects Apache OpenOffice: through 4.1.15. Users are recommended to upgrade to version 4.1.16, which fixes the issue.

    Apache Openoffice

    4.3 MEDIUM 0.5% exploit odds Fix listed
  7. CVE-2025-64407

    Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. Such links could also be used to transmit system information, such as environment variables or configuration settings. In the affected versions of Apache OpenOffice, documents that used a certain URI scheme linking to external files would load the contents of such files without prompting the user for permission to do so. Such URI scheme allows to include system configuration data, that is not supposed to be transmitted externally. This issue affects Apache OpenOffice: through 4.1.15. Users are recommended to upgrade to version 4.1.16, which fixes the issue. The LibreOffice suite reported this issue as CVE-2024-12426.

    Apache Openoffice

    5.3 MEDIUM 0.5% exploit odds Fix listed
  8. CVE-2026-90628

    An uncontrolled memory access in the PDF export code of Apache OpenOffice versions through 4.1.16 allows a crafted CFF font to cause a stack overflow problem, causing program crash or memory corruption, or even running other code. Users are recommended to upgrade to version 4.1.17, which fixes this issue.

    Memory safety Apache Openoffice

    7.3 HIGH 0.2% exploit odds Fix listed
  9. CVE-2026-90632

    Apache OpenOffice documents can include multimedia content (audio, video, etc.) A crafted document could exploit the GStreamer multimedia component of Apache OpenOffice version through 4.1.16 to load the contents of any local file, and include them when the document is saved or exported, for example as PDF. Users are recommended to upgrade to version 4.1.17, which fixes this issue.

    Disclosure Apache Openoffice

    5.5 MEDIUM 0.2% exploit odds Fix listed
  10. CVE-2026-90629

    An uncontrolled memory access in the WMF import code of Apache OpenOffice versions through 4.1.16 allows a crafted WMF file to cause an invalid memory access, causing program crash or memory corruption. Users are recommended to upgrade to version 4.1.17, which fixes this issue.

    Memory safety Apache Openoffice

    7.3 HIGH 0.2% exploit odds Fix listed
  11. CVE-2026-90634

    An uncontrolled memory access in the PDF import code of Apache OpenOffice versions through 4.1.16 allows a crafted PDF to cause an out-of-bounds memory write, causing program crash or memory corruption. Users are recommended to upgrade to version 4.1.17, which fixes this issue.

    Memory safety Apache Openoffice

    7.3 HIGH 0.2% exploit odds Fix listed
  12. CVE-2026-59267

    A crafted DXF document causes a heap buffer overflow in Draw in Apache OpenOffice 4.1.16 and earlier. This could cause a crash or otherwise a corruption of memory areas. Users are recommended to upgrade to version 4.1.17, which fixes this issue.

    Memory safety Apache Openoffice

    5.8 MEDIUM 0.2% exploit odds Fix listed
  13. CVE-2026-90631

    Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt, possibly transferring the contents of environment variables in the process. This issue affects Apache OpenOffice: through 4.1.16. Users are recommended to upgrade to version 4.1.17, which fixes the issue.

    Auth & access Server Apache Openoffice

    3.3 LOW 0.2% exploit odds Fix listed
  14. CVE-2026-59264

    The Windows installers of Apache OpenOffice 4.1.16 and earlier allow an already manipulated system to run external code with elevated access. Users are recommended to upgrade to version 4.1.17, which fixes this issue.

    Code execution OS & kernel Apache Openoffice

    7.8 HIGH 0.2% exploit odds Fix listed
  15. CVE-2026-90626

    An uncontrolled memory access in the PDF import code of Apache OpenOffice versions through 4.1.16 allows a crafted PDF to cause an out-of-bounds memory write, causing program crash or memory corruption. Users are recommended to upgrade to version 4.1.17, which fixes this issue.

    Memory safety Apache Openoffice

    7.3 HIGH 0.2% exploit odds Fix listed
  16. CVE-2026-90627

    The flat file database driver in Apache Openoffice versions through 4.1.16 allows a crafted document to read the contents of any local file without asking the user. Users are recommended to upgrade to version 4.1.17, which fixes this issue.

    Disclosure OS & kernel Apache Openoffice

    5.5 MEDIUM 0.2% exploit odds Fix listed
  17. CVE-2026-59268

    An out-of-bounds Write vulnerability in Apache OpenOffice versions through 4.1.16 could allow an attacker to craft a Microsoft Word document that would crash the program, or otherwise corrupt other memory areas. Users are recommended to upgrade to version 4.1.17, which fixes this issue.

    Memory safety Apache Openoffice

    7.3 HIGH 0.2% exploit odds Fix listed
  18. CVE-2026-90624

    An unchecked memory access in the PDF import code of Apache OpenOffice versions through 4.1.16 on allows a crafted PDF to execute an out-of-bounds memory write. This could crash the program or cause memory corruption. Users are recommended to upgrade to version 4.1.17, which fixes this issue.

    Memory safety Apache Openoffice

    7.3 HIGH 0.2% exploit odds Fix listed
  19. CVE-2026-59263

    A manipulated document opened in Apache OpenOffice 4.1.16 or earlier may allow substituted content to be displayed manipulating the user. Such documents are corrupt and should not be opened. Users are recommended to upgrade to version 4.1.17, which fixes this issue.

    Other Apache Openoffice

    1.9 LOW 0.2% exploit odds Fix listed

All CVEs affecting Apache Openoffice that appear in CVE.org and NVD, sorted by how likely they are to be exploited (EPSS), with fix status and timeline.