CVE-2026-59263

UNKNOWN 0.0

Apache OpenOffice: Carefully crafted documents could display different data when opened with different programs, instead of being reported as corrupt.

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

A manipulated document opened in Apache OpenOffice 4.1.16 or earlier may allow substituted content to be displayed manipulating the user. Such documents are corrupt and should not be opened. Users are recommended to upgrade to version 4.1.17, which fixes this issue.

CWE	CWE-349
Vendor	apache software foundation
Product	apache openoffice
Published	Nov 4, 2026
Last Updated	Nov 4, 2026

Stay Ahead of the Next One

Get instant alerts for apache software foundation apache openoffice

Be the first to know when new unknown vulnerabilities affecting apache software foundation apache openoffice are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Apache Software Foundation / Apache OpenOffice

0 ≤ 4.1.16

References

NVD ↗ CVE.org ↗ EPSS Data ↗

lists.apache.org: https://lists.apache.org/thread.html/drr0ss9wrkq0omlrwjhcm8738pjx3xgd openwall.com: http://www.openwall.com/lists/oss-security/2026/11/03/21

Credits

Yufan You from Tsinghua University