CVSS 5.5 (medium) · published 2026-11-04
A manipulated document opened in Apache OpenOffice 4.1.16 or earlier may allow substituted content to be displayed manipulating the user. Such documents are corrupt and should not be opened. Users are recommended to upgrade to version 4.1.17, which fixes this issue.
Affected products (NVD): apache openoffice
Fixed in (NVD): 4.1.17
Weakness: CWE-349
Source: NVD CVE-2026-59263
Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.