Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

72 records

Vendor: Apache Component: Openoffice Clear all filters
TI-2026-85033 CVE-2026-59267 · GHSA-5687-px89-gccc

Heap buffer overflow in Apache OpenOffice DXF import

Priority LOW 27

A crafted DXF document causes a heap buffer overflow in Draw in Apache OpenOffice 4.1.16 and earlier.

CVSS 4.0MEDIUM 5.8 Local No auth User interaction EPSS 0.00214 Published 2026-11-04 No fix listed CWE-122
TI-2026-85031 CVE-2026-90632 · GHSA-35jc-7q3h-mhvw

Local file inclusion in Apache OpenOffice via GStreamer plugin

Priority LOW 24

Apache OpenOffice documents can include multimedia content (audio, video, etc.) A crafted document could exploit the GStreamer multimedia component of Apache OpenOffice version through 4.1.16 to load the contents of any…

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00221 Published 2026-11-04 No fix listed CWE-552
TI-2026-85032 CVE-2026-90634 · GHSA-g838-6278-4hfv

Out-of-bounds write in Apache OpenOffice PDF import

Priority LOW 33

An uncontrolled memory access in the PDF import code of Apache OpenOffice versions through 4.1.16 allows a crafted PDF to cause an out-of-bounds memory write, causing program crash or memory corruption.

CVSS 3.1HIGH 7.3 Local No auth User interaction EPSS 0.00214 Published 2026-11-04 No fix listed CWE-787
TI-2026-85029 CVE-2026-90629 · GHSA-pv52-gqgr-5x2q

Out of bounds memory access in Apache OpenOffice WMF import

Priority LOW 33

An uncontrolled memory access in the WMF import code of Apache OpenOffice versions through 4.1.16 allows a crafted WMF file to cause an invalid memory access, causing program crash or memory corruption.

CVSS 3.1HIGH 7.3 Local No auth User interaction EPSS 0.00214 Published 2026-11-04 No fix listed CWE-787
TI-2026-85028 CVE-2026-90628 · GHSA-r46v-74wr-vj6p

Stack overflow in Apache OpenOffice CFF hint handling

Priority LOW 34

An uncontrolled memory access in the PDF export code of Apache OpenOffice versions through 4.1.16 allows a crafted CFF font to cause a stack overflow problem, causing program crash or memory corruption, or even running o…

CVSS 3.1HIGH 7.3 Local No auth User interaction EPSS 0.00232 Published 2026-11-04 No fix listed CWE-121
TI-2026-85027 CVE-2026-90627 · GHSA-c955-437q-2fxj

Local file read in Apache OpenOffice flat file database driver

Priority LOW 24

The flat file database driver in Apache Openoffice versions through 4.1.16 allows a crafted document to read the contents of any local file without asking the user.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00221 Published 2026-11-04 No fix listed CWE-552
TI-2026-85026 CVE-2026-90626 · GHSA-jj47-f744-qvq6

Out-of-bounds write in Apache OpenOffice PDF import

Priority LOW 33

An uncontrolled memory access in the PDF import code of Apache OpenOffice versions through 4.1.16 allows a crafted PDF to cause an out-of-bounds memory write, causing program crash or memory corruption.

CVSS 3.1HIGH 7.3 Local No auth User interaction EPSS 0.00214 Published 2026-11-04 No fix listed CWE-787
TI-2026-85025 CVE-2026-90624 · GHSA-gf8j-hhcq-h746

Out-of-bounds write in Apache OpenOffice PDF import

Priority LOW 33

An unchecked memory access in the PDF import code of Apache OpenOffice versions through 4.1.16 on allows a crafted PDF to execute an out-of-bounds memory write.

CVSS 3.1HIGH 7.3 Local No auth User interaction EPSS 0.0021 Published 2026-11-04 No fix listed CWE-787
TI-2026-85024 CVE-2026-59268 · GHSA-7v5j-xj9w-232m

Out-of-bounds write in Apache OpenOffice WW8 PLCF reader

Priority LOW 33

An out-of-bounds Write vulnerability in Apache OpenOffice versions through 4.1.16 could allow an attacker to craft a Microsoft Word document that would crash the program, or otherwise corrupt other memory areas.

CVSS 3.1HIGH 7.3 Local No auth User interaction EPSS 0.0021 Published 2026-11-04 No fix listed CWE-787
TI-2026-85023 CVE-2026-59264 · GHSA-78xp-gm58-q69q

Uncontrolled search path in Apache OpenOffice Windows installer

Priority LOW 35

The Windows installers of Apache OpenOffice 4.1.16 and earlier allow an already manipulated system to run external code with elevated access.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00218 Published 2026-11-04 No fix listed CWE-427
TI-2026-85022 CVE-2026-59263 · GHSA-ffj4-jpv9-gmgr

Apache OpenOffice shows substituted content in crafted documents

Priority LOW 10

A manipulated document opened in Apache OpenOffice 4.1.16 or earlier may allow substituted content to be displayed manipulating the user.

CVSS 4.0LOW 1.9 Local No auth User interaction EPSS 0.00157 Published 2026-11-04 No fix listed CWE-349
TI-2025-39830 CVE-2025-64406 · GHSA-fj59-gg5v-953f

Apache OpenOffice: Possible memory corruption during CSV import

Priority LOW 21

An out-of-bounds Write vulnerability in Apache OpenOffice could allow an attacker to craft a document that would crash the program, or otherwise corrupt other memory areas.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00546 Published 2025-11-12 No fix listed CWE-787
TI-2023-25912 CVE-2023-47804 · GHSA-cmm4-pc7p-g834

Apache OpenOffice: Macro URL arbitrary script execution

Priority MEDIUM 43

Apache OpenOffice documents can contain links that call internal macros with arbitrary arguments.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02727 Published 2023-12-29 No fix listed CWE-20
TI-2022-18258 CVE-2022-38745 · GHSA-w32v-x9j2-mv46

Apache OpenOffice: Empty entry in Java class path

Priority LOW 38

Apache OpenOffice versions before 4.1.14 may be configured to add an empty entry to the Java class path.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00872 Published 2023-03-24 Partial fix · 4.1.14 CWE-1188
TI-2022-17474 CVE-2022-37401 · GHSA-468w-rc5f-76wx

Apache OpenOffice Weak Master Keys

Priority MEDIUM 42

Apache OpenOffice supports the storage of passwords for web connections in the user's configuration database.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01946 Published 2022-08-13 Fixed in 4.1.13 CWE-331
Load more