Apache Openoffice CVEs.
Published CVEs affecting Apache Openoffice, ranked by exploit odds.
-
CVE-2026-90627
The flat file database driver in Apache Openoffice versions through 4.1.16 allows a crafted document to read the contents of any local file without asking the user. Users are recommended to upgrade to version 4.1.17, which fixes this issue.
-
CVE-2026-59264
The Windows installers of Apache OpenOffice 4.1.16 and earlier allow an already manipulated system to run external code with elevated access. Users are recommended to upgrade to version 4.1.17, which fixes this issue.
All CVEs affecting Apache Openoffice that appear in CVE.org and NVD, sorted by how likely they are to be exploited (EPSS), with fix status and timeline.