{"schema_version":1,"title":"Apache OpenOffice vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 20 vulnerabilities in Apache OpenOffice: 0 in the last 7 days and 13 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-59267, was published on 4 November 2026. 12 vulnerabilities in the last four weeks, up 1100% on the four before (1).","url":"https://junglewise.ai/threats/technologies/openoffice","json_url":"https://junglewise.ai/threats/technologies/openoffice.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/openoffice","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":false,"counts":{"high":4,"all_time":20,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":12,"last_90_days":13,"last_365_days":13},"latest":[{"cve":"CVE-2026-59267","slug":"cve-2026-59267-a-crafted-dxf-document-causes-a-heap-buffer-overflow-in-draw-in","title":"Apache OpenOffice heap buffer overflow in DXF parsing","severity":"info","exploited":false,"published_at":"2026-11-04T12:17:06.943+00:00","url":"https://junglewise.ai/threats/cve-2026-59267-a-crafted-dxf-document-causes-a-heap-buffer-overflow-in-draw-in"},{"cve":"CVE-2026-90634","slug":"cve-2026-90634-an-uncontrolled-memory-access-in-the-pdf-import-code-of-apache","title":"Apache OpenOffice out-of-bounds memory write in PDF import","severity":"info","exploited":false,"published_at":"2026-11-04T11:17:19.84+00:00","url":"https://junglewise.ai/threats/cve-2026-90634-an-uncontrolled-memory-access-in-the-pdf-import-code-of-apache"},{"cve":"CVE-2026-90632","slug":"cve-2026-90632-apache-openoffice-documents-can-include-multimedia-content-audio","title":"Apache OpenOffice file disclosure via GStreamer multimedia handling","severity":"info","exploited":false,"published_at":"2026-11-04T11:17:19.717+00:00","url":"https://junglewise.ai/threats/cve-2026-90632-apache-openoffice-documents-can-include-multimedia-content-audio"},{"cve":"CVE-2026-90631","slug":"cve-2026-90631-apache-openoffice-documents-can-contain-links-a-missing","title":"Apache OpenOffice external link loading without authorization","severity":"info","exploited":false,"published_at":"2026-11-04T11:17:19.593+00:00","url":"https://junglewise.ai/threats/cve-2026-90631-apache-openoffice-documents-can-contain-links-a-missing"},{"cve":"CVE-2026-90629","slug":"cve-2026-90629-an-uncontrolled-memory-access-in-the-wmf-import-code-of-apache","title":"Apache OpenOffice memory access violation in WMF import","severity":"info","exploited":false,"published_at":"2026-11-04T11:17:19.47+00:00","url":"https://junglewise.ai/threats/cve-2026-90629-an-uncontrolled-memory-access-in-the-wmf-import-code-of-apache"},{"cve":"CVE-2026-90628","slug":"cve-2026-90628-an-uncontrolled-memory-access-in-the-pdf-export-code-of-apache","title":"Apache OpenOffice stack overflow in PDF export CFF font parsing","severity":"info","exploited":false,"published_at":"2026-11-04T11:17:19.347+00:00","url":"https://junglewise.ai/threats/cve-2026-90628-an-uncontrolled-memory-access-in-the-pdf-export-code-of-apache"},{"cve":"CVE-2026-90627","slug":"cve-2026-90627-the-flat-file-database-driver-in-apache-openoffice-versions","title":"Apache OpenOffice flat file database driver local file read","severity":"info","exploited":false,"published_at":"2026-11-04T11:17:19.227+00:00","url":"https://junglewise.ai/threats/cve-2026-90627-the-flat-file-database-driver-in-apache-openoffice-versions"},{"cve":"CVE-2026-90626","slug":"cve-2026-90626-an-uncontrolled-memory-access-in-the-pdf-import-code-of-apache","title":"Apache OpenOffice buffer overflow in PDF import","severity":"info","exploited":false,"published_at":"2026-11-04T11:17:19.097+00:00","url":"https://junglewise.ai/threats/cve-2026-90626-an-uncontrolled-memory-access-in-the-pdf-import-code-of-apache"},{"cve":"CVE-2026-90624","slug":"cve-2026-90624-an-unchecked-memory-access-in-the-pdf-import-code-of-apache","title":"Apache OpenOffice memory access violation in PDF import","severity":"info","exploited":false,"published_at":"2026-11-04T11:17:18.97+00:00","url":"https://junglewise.ai/threats/cve-2026-90624-an-unchecked-memory-access-in-the-pdf-import-code-of-apache"},{"cve":"CVE-2026-59268","slug":"cve-2026-59268-an-out-of-bounds-write-vulnerability-in-apache-openoffice","title":"Apache OpenOffice out-of-bounds write in Word document parsing","severity":"info","exploited":false,"published_at":"2026-11-04T11:17:16.703+00:00","url":"https://junglewise.ai/threats/cve-2026-59268-an-out-of-bounds-write-vulnerability-in-apache-openoffice"},{"cve":"CVE-2026-59264","slug":"cve-2026-59264-the-windows-installers-of-apache-openoffice-4-1-16-and-earlier","title":"Apache OpenOffice Windows installer code execution","severity":"info","exploited":false,"published_at":"2026-11-04T11:17:16.577+00:00","url":"https://junglewise.ai/threats/cve-2026-59264-the-windows-installers-of-apache-openoffice-4-1-16-and-earlier"},{"cve":"CVE-2026-59263","slug":"cve-2026-59263-a-manipulated-document-opened-in-apache-openoffice-4-1-16-or","title":"Apache OpenOffice document content substitution","severity":"info","exploited":false,"published_at":"2026-11-04T11:17:16.393+00:00","url":"https://junglewise.ai/threats/cve-2026-59263-a-manipulated-document-opened-in-apache-openoffice-4-1-16-or"},{"cve":"CVE-2026-59265","epss":0.0022,"slug":"cve-2026-59265-a-code-execution-issue-in-the-java-integration-in-apache","title":"Apache OpenOffice Java integration remote code execution","severity":"info","exploited":false,"published_at":"2026-10-02T18:17:03.917+00:00","url":"https://junglewise.ai/threats/cve-2026-59265-a-code-execution-issue-in-the-java-integration-in-apache"},{"cve":"CVE-2025-64407","cvss":5.3,"epss":0.0049,"slug":"cve-2025-64407-apache-openoffice-documents-can-contain-links-a-missing","title":"Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an…","severity":"medium","exploited":false,"published_at":"2025-11-12T10:15:44.457+00:00","url":"https://junglewise.ai/threats/cve-2025-64407-apache-openoffice-documents-can-contain-links-a-missing"},{"cve":"CVE-2025-64406","cvss":4.3,"epss":0.0055,"slug":"cve-2025-64406-an-out-of-bounds-write-vulnerability-in-apache-openoffice-could","title":"An out-of-bounds Write vulnerability in Apache OpenOffice could allow an attacker to craft a document that would crash…","severity":"medium","exploited":false,"published_at":"2025-11-12T09:15:41.797+00:00","url":"https://junglewise.ai/threats/cve-2025-64406-an-out-of-bounds-write-vulnerability-in-apache-openoffice-could"},{"cve":"CVE-2025-64405","cvss":7.5,"epss":0.0145,"slug":"cve-2025-64405-apache-openoffice-documents-can-contain-links-a-missing","title":"Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an…","severity":"high","exploited":false,"published_at":"2025-11-12T09:15:41.643+00:00","url":"https://junglewise.ai/threats/cve-2025-64405-apache-openoffice-documents-can-contain-links-a-missing"},{"cve":"CVE-2025-64404","cvss":7.5,"epss":0.0125,"slug":"cve-2025-64404-apache-openoffice-documents-can-contain-links-to-other-files-a","title":"Apache OpenOffice documents can contain links to other files. A missing Authorization vulnerability in Apache…","severity":"high","exploited":false,"published_at":"2025-11-12T09:15:41.497+00:00","url":"https://junglewise.ai/threats/cve-2025-64404-apache-openoffice-documents-can-contain-links-to-other-files-a"},{"cve":"CVE-2025-64403","cvss":8.1,"epss":0.0126,"slug":"cve-2025-64403-apache-openoffice-calc-spreadsheet-can-contain-links-to-other","title":"Apache OpenOffice Calc spreadsheet can contain links to other files, in the form of \"external data sources\". A missing…","severity":"high","exploited":false,"published_at":"2025-11-12T09:15:41.343+00:00","url":"https://junglewise.ai/threats/cve-2025-64403-apache-openoffice-calc-spreadsheet-can-contain-links-to-other"},{"cve":"CVE-2025-64402","cvss":6.5,"epss":0.0059,"slug":"cve-2025-64402-apache-openoffice-documents-can-contain-links-a-missing","title":"Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an…","severity":"medium","exploited":false,"published_at":"2025-11-12T09:15:41.18+00:00","url":"https://junglewise.ai/threats/cve-2025-64402-apache-openoffice-documents-can-contain-links-a-missing"},{"cve":"CVE-2025-64401","cvss":7.5,"epss":0.009,"slug":"cve-2025-64401-apache-openoffice-documents-can-contain-links-a-missing","title":"Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an…","severity":"high","exploited":false,"published_at":"2025-11-12T09:15:40.997+00:00","url":"https://junglewise.ai/threats/cve-2025-64401-apache-openoffice-documents-can-contain-links-a-missing"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":12},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Apache Airflow","slug":"airflow","vulnerabilities":95,"url":"https://junglewise.ai/threats/technologies/airflow"},{"name":"Apache Camel","slug":"camel","vulnerabilities":87,"url":"https://junglewise.ai/threats/technologies/camel"},{"name":"Apache Tomcat","slug":"tomcat","vulnerabilities":87,"url":"https://junglewise.ai/threats/technologies/tomcat"},{"name":"Apache Thrift","slug":"thrift","vulnerabilities":77,"url":"https://junglewise.ai/threats/technologies/thrift"},{"name":"Apache Ofbiz","slug":"ofbiz","vulnerabilities":67,"url":"https://junglewise.ai/threats/technologies/ofbiz"},{"name":"Apache HTTP Server","slug":"http-server","vulnerabilities":62,"url":"https://junglewise.ai/threats/technologies/http-server"},{"name":"Apache Traffic Server","slug":"traffic-server","vulnerabilities":55,"url":"https://junglewise.ai/threats/technologies/traffic-server"},{"name":"Apache Brpc","slug":"brpc","vulnerabilities":36,"url":"https://junglewise.ai/threats/technologies/brpc"},{"name":"Apache Roller","slug":"roller","vulnerabilities":30,"url":"https://junglewise.ai/threats/technologies/roller"},{"name":"Apache CloudStack","slug":"cloudstack","vulnerabilities":28,"url":"https://junglewise.ai/threats/technologies/cloudstack"},{"name":"Apache ActiveMQ","slug":"activemq","vulnerabilities":27,"url":"https://junglewise.ai/threats/technologies/activemq"},{"name":"Apache Apisix","slug":"apisix","vulnerabilities":27,"url":"https://junglewise.ai/threats/technologies/apisix"}],"technology":{"hub":true,"name":"Apache OpenOffice","slug":"openoffice","vendor":{"hub":true,"name":"Apache","slug":"apache","url":"https://junglewise.ai/threats/vendors/apache"},"aliases":[],"category":"office-suite","homepage":"https://www.openoffice.org","description":"Free and open-source office suite compatible with multiple document formats.","url":"https://junglewise.ai/threats/technologies/openoffice"},"most_severe":[{"cve":"CVE-2025-64403","cvss":8.1,"epss":0.0126,"slug":"cve-2025-64403-apache-openoffice-calc-spreadsheet-can-contain-links-to-other","title":"Apache OpenOffice Calc spreadsheet can contain links to other files, in the form of \"external data sources\". A missing…","severity":"high","exploited":false,"published_at":"2025-11-12T09:15:41.343+00:00","url":"https://junglewise.ai/threats/cve-2025-64403-apache-openoffice-calc-spreadsheet-can-contain-links-to-other"},{"cve":"CVE-2025-64405","cvss":7.5,"epss":0.0145,"slug":"cve-2025-64405-apache-openoffice-documents-can-contain-links-a-missing","title":"Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an…","severity":"high","exploited":false,"published_at":"2025-11-12T09:15:41.643+00:00","url":"https://junglewise.ai/threats/cve-2025-64405-apache-openoffice-documents-can-contain-links-a-missing"},{"cve":"CVE-2025-64404","cvss":7.5,"epss":0.0125,"slug":"cve-2025-64404-apache-openoffice-documents-can-contain-links-to-other-files-a","title":"Apache OpenOffice documents can contain links to other files. A missing Authorization vulnerability in Apache…","severity":"high","exploited":false,"published_at":"2025-11-12T09:15:41.497+00:00","url":"https://junglewise.ai/threats/cve-2025-64404-apache-openoffice-documents-can-contain-links-to-other-files-a"},{"cve":"CVE-2025-64401","cvss":7.5,"epss":0.009,"slug":"cve-2025-64401-apache-openoffice-documents-can-contain-links-a-missing","title":"Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an…","severity":"high","exploited":false,"published_at":"2025-11-12T09:15:40.997+00:00","url":"https://junglewise.ai/threats/cve-2025-64401-apache-openoffice-documents-can-contain-links-a-missing"},{"cve":"CVE-2025-64402","cvss":6.5,"epss":0.0059,"slug":"cve-2025-64402-apache-openoffice-documents-can-contain-links-a-missing","title":"Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an…","severity":"medium","exploited":false,"published_at":"2025-11-12T09:15:41.18+00:00","url":"https://junglewise.ai/threats/cve-2025-64402-apache-openoffice-documents-can-contain-links-a-missing"},{"cve":"CVE-2025-64407","cvss":5.3,"epss":0.0049,"slug":"cve-2025-64407-apache-openoffice-documents-can-contain-links-a-missing","title":"Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an…","severity":"medium","exploited":false,"published_at":"2025-11-12T10:15:44.457+00:00","url":"https://junglewise.ai/threats/cve-2025-64407-apache-openoffice-documents-can-contain-links-a-missing"},{"cve":"CVE-2025-64406","cvss":4.3,"epss":0.0055,"slug":"cve-2025-64406-an-out-of-bounds-write-vulnerability-in-apache-openoffice-could","title":"An out-of-bounds Write vulnerability in Apache OpenOffice could allow an attacker to craft a document that would crash…","severity":"medium","exploited":false,"published_at":"2025-11-12T09:15:41.797+00:00","url":"https://junglewise.ai/threats/cve-2025-64406-an-out-of-bounds-write-vulnerability-in-apache-openoffice-could"},{"cve":"CVE-2026-59265","epss":0.0022,"slug":"cve-2026-59265-a-code-execution-issue-in-the-java-integration-in-apache","title":"Apache OpenOffice Java integration remote code execution","severity":"info","exploited":false,"published_at":"2026-10-02T18:17:03.917+00:00","url":"https://junglewise.ai/threats/cve-2026-59265-a-code-execution-issue-in-the-java-integration-in-apache"},{"cve":"CVE-2026-59267","slug":"cve-2026-59267-a-crafted-dxf-document-causes-a-heap-buffer-overflow-in-draw-in","title":"Apache OpenOffice heap buffer overflow in DXF parsing","severity":"info","exploited":false,"published_at":"2026-11-04T12:17:06.943+00:00","url":"https://junglewise.ai/threats/cve-2026-59267-a-crafted-dxf-document-causes-a-heap-buffer-overflow-in-draw-in"},{"cve":"CVE-2026-90634","slug":"cve-2026-90634-an-uncontrolled-memory-access-in-the-pdf-import-code-of-apache","title":"Apache OpenOffice out-of-bounds memory write in PDF import","severity":"info","exploited":false,"published_at":"2026-11-04T11:17:19.84+00:00","url":"https://junglewise.ai/threats/cve-2026-90634-an-uncontrolled-memory-access-in-the-pdf-import-code-of-apache"}],"generated_at":"2026-11-13T03:07:00.155039+00:00"}