Technology · Apache
Apache OpenOffice vulnerabilities
Updated . Rebuilt every hour.
Junglewise Threat Intelligence has tracked 20 vulnerabilities in Apache OpenOffice: 0 in the last 7 days and 13 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-59267, was published on 4 November 2026. 12 vulnerabilities in the last four weeks, up 1100% on the four before (1).
- Last 7 days
- 0
- Last 90 days
- 13
- Critical, all time
- 0
- Exploited in the wild
- 0
About Apache OpenOffice
Free and open-source office suite compatible with multiple document formats.
Latest Apache OpenOffice vulnerabilities
- CVE-2026-59267: Apache OpenOffice heap buffer overflow in DXF parsinginfo
- CVE-2026-90634: Apache OpenOffice out-of-bounds memory write in PDF importinfo
- CVE-2026-90632: Apache OpenOffice file disclosure via GStreamer multimedia handlinginfo
- CVE-2026-90631: Apache OpenOffice external link loading without authorizationinfo
- CVE-2026-90629: Apache OpenOffice memory access violation in WMF importinfo
- CVE-2026-90628: Apache OpenOffice stack overflow in PDF export CFF font parsinginfo
- CVE-2026-90627: Apache OpenOffice flat file database driver local file readinfo
- CVE-2026-90626: Apache OpenOffice buffer overflow in PDF importinfo
- CVE-2026-90624: Apache OpenOffice memory access violation in PDF importinfo
- CVE-2026-59268: Apache OpenOffice out-of-bounds write in Word document parsinginfo
- CVE-2026-59264: Apache OpenOffice Windows installer code executioninfo
- CVE-2026-59263: Apache OpenOffice document content substitutioninfo
- CVE-2026-59265: Apache OpenOffice Java integration remote code executioninfoEPSS 0.2%
- CVE-2025-64407: Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an…mediumCVSS 5.3EPSS 0.5%
- CVE-2025-64406: An out-of-bounds Write vulnerability in Apache OpenOffice could allow an attacker to craft a document that would crash…mediumCVSS 4.3EPSS 0.5%
- CVE-2025-64405: Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an…highCVSS 7.5EPSS 1.5%
- CVE-2025-64404: Apache OpenOffice documents can contain links to other files. A missing Authorization vulnerability in Apache…highCVSS 7.5EPSS 1.3%
- CVE-2025-64403: Apache OpenOffice Calc spreadsheet can contain links to other files, in the form of "external data sources". A missing…highCVSS 8.1EPSS 1.3%
- CVE-2025-64402: Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an…mediumCVSS 6.5EPSS 0.6%
- CVE-2025-64401: Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an…highCVSS 7.5EPSS 0.9%
Most severe Apache OpenOffice vulnerabilities
Exploited in the wild first, then by severity and CVSS score.
- CVE-2025-64403: Apache OpenOffice Calc spreadsheet can contain links to other files, in the form of "external data sources". A missing…highCVSS 8.1EPSS 1.3%
- CVE-2025-64405: Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an…highCVSS 7.5EPSS 1.5%
- CVE-2025-64404: Apache OpenOffice documents can contain links to other files. A missing Authorization vulnerability in Apache…highCVSS 7.5EPSS 1.3%
- CVE-2025-64401: Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an…highCVSS 7.5EPSS 0.9%
- CVE-2025-64402: Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an…mediumCVSS 6.5EPSS 0.6%
- CVE-2025-64407: Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an…mediumCVSS 5.3EPSS 0.5%
- CVE-2025-64406: An out-of-bounds Write vulnerability in Apache OpenOffice could allow an attacker to craft a document that would crash…mediumCVSS 4.3EPSS 0.5%
- CVE-2026-59265: Apache OpenOffice Java integration remote code executioninfoEPSS 0.2%
- CVE-2026-59267: Apache OpenOffice heap buffer overflow in DXF parsinginfo
- CVE-2026-90634: Apache OpenOffice out-of-bounds memory write in PDF importinfo
Vulnerabilities per week
12 vulnerabilities in the last four weeks, up 1100% on the four before (1). The last 13 weeks, by the week each vulnerability was published.
| Week of | Bar | Vulns | Critical |
|---|---|---|---|
| 17 Aug 2026 | 0 | 0 | |
| 24 Aug 2026 | 0 | 0 | |
| 31 Aug 2026 | 0 | 0 | |
| 7 Sep 2026 | 0 | 0 | |
| 14 Sep 2026 | 0 | 0 | |
| 21 Sep 2026 | 0 | 0 | |
| 28 Sep 2026 | 1 | 0 | |
| 5 Oct 2026 | 0 | 0 | |
| 12 Oct 2026 | 0 | 0 | |
| 19 Oct 2026 | 0 | 0 | |
| 26 Oct 2026 | 0 | 0 | |
| 2 Nov 2026 | 12 | 0 | |
| 9 Nov 2026 | 0 | 0 |
Embed a badge
A live badge for a README, a status page or an internal wiki: how many Apache OpenOffice vulnerabilities were published in the last 7 days and how many of them are critical, refreshed hourly.
[](https://junglewise.ai/threats/technologies/openoffice)<a href="https://junglewise.ai/threats/technologies/openoffice"><img src="https://junglewise.ai/threats/technologies/openoffice/badge.svg" alt="Apache OpenOffice vulnerabilities" /></a>How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/technologies/openoffice.json, and this page as text at https://junglewise.ai/threats/technologies/openoffice.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "Apache OpenOffice vulnerabilities", https://junglewise.ai/threats/technologies/openoffice, 13 November 2026.