All vulnerabilities
CVE-2026-59265

Apache OpenOffice, Apache OpenOffice: Opening a malicious document can lead to system takeover

Apache Software Foundation Apache OpenOffice
Open in ThreatlineRecord JSON
CVSS
8.8High
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.43%Chance of exploitation activity in the next 30 days, higher than 36% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in95923fd437e06edd38a4f0e139a27c755a6f3ba6Also 181421139242694b309751fb666406eddc203c50CVE List
Published2 Oct 2026Updated 8 Oct 2026CVE List

What fixes it

  • 95923fd437e06edd38a4f0e139a27c755a6f3ba6Apache OpenOfficeCVE List
  • 181421139242694b309751fb666406eddc203c50Apache OpenOfficeCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

A code execution issue in the Java integration in Apache OpenOffice v4.1.16 and earlier allows a crafted untrusted document to trigger executing arbitrary (even remote) code when opened by the user.

This issue is expected to be fixed in version 4.1.17, which is in the release candidate phase.

Until then, users can mitigate this issue by disabling Java runtime integration in the Preferences dialog. This prevents the attack. If this is not possible, or as an extra precaution, you can avoid opening open untrusted files entirely. Once 4.1.17 is released, upgrade to that version to fix the issue.

Text from CVE List

Affected versions 3

  • Apache OpenOfficeaffected: all versions through 4.1.16CVE List
  • Apache OpenOfficeaffected: all versions before 95923fd437e06edd38a4f0e139a27c755a6f3ba6CVE List
  • Apache OpenOfficeaffected: all versions before 181421139242694b309751fb666406eddc203c50CVE List

References 3