CVSS 7.8 (high) · published 2026-11-04
The Windows installers of Apache OpenOffice 4.1.16 and earlier allow an already manipulated system to run external code with elevated access. Users are recommended to upgrade to version 4.1.17, which fixes this issue.
Affected products (NVD): apache openoffice
Fixed in (NVD): 4.1.17
Weakness: CWE-427
Source: NVD CVE-2026-59264
Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.