Apache Software Foundation Apache OpenOffice

• CVE-2026-59267 Medium 5.8 Apache OpenOffice: Heap Buffer Overflow in DXF LWPOLYLINE import could cause memory corruption 0.2%
• CVE-2026-90632 Unrated Apache OpenOffice: Local file inclusion via GStreamer plugin 0.2%
• CVE-2026-90634 High 7.3 Apache OpenOffice: Out-of-bounds write when importing encrypted PDF files 0.2%
• CVE-2026-90631 Low 3.3 Apache OpenOffice: Remote document loaded without prompt, possibiy leaking environment variables 0.2%
• CVE-2026-90629 High 7.3 Apache OpenOffice: Out of bounds memory access during WMF import 0.2%
• CVE-2026-90628 High 7.3 Apache OpenOffice: Stack overflow in CFF hint handling 0.2%
• CVE-2026-90627 Medium 5.5 Apache OpenOffice: Local file inclusion via SQL provider and flat file database references 0.2%
• CVE-2026-90626 High 7.3 Apache OpenOffice: Out-of-bounds write when importing encrypted PDF files 0.2%
• CVE-2026-90624 High 7.3 Apache OpenOffice: PDF File Parsing Heap based Buffer-Overflow-Remote Code Execution Vulnerability 0.2%
• CVE-2026-59268 High 7.3 Apache OpenOffice: Heap out-of-bounds write in WW8 PLCF reader 0.2%
• CVE-2026-59264 High 7.8 Apache OpenOffice: Uncontrolled search path element vulnerability in Windows installer 0.2%
• CVE-2026-59263 Low 1.9 Apache OpenOffice: Carefully crafted documents could display different data when opened with different programs, instead of being reported as corrupt. 0.2%
• CVE-2026-59265 High 8.8 Apache OpenOffice, Apache OpenOffice: Opening a malicious document can lead to system takeover 0.6%
• CVE-2025-64407 Medium 5.3 Apache OpenOffice: URL fetching can be used to exfiltrate arbitrary INI file values and environment variables 0.5%
• CVE-2025-64406 Medium 4.3 Apache OpenOffice: Possible memory corruption during CSV import 0.5%
• CVE-2025-64405 High 7.5 Apache OpenOffice: Remote documents loaded without prompt via DDE function 1.4%
• CVE-2025-64404 High 7.5 Apache OpenOffice: Remote documents loaded without prompt via background and bullet images 1.3%
• CVE-2025-64403 High 8.1 Apache OpenOffice: Remote documents loaded without prompt via "external data sources" in Calc 1.3%
• CVE-2025-64402 Medium 6.5 Apache OpenOffice: Remote documents loaded without prompt via OLE objects 0.6%
• CVE-2025-64401 High 7.5 Apache OpenOffice: Remote documents loaded without prompt via IFrame 0.9%
• CVE-2023-47804 Unrated Apache OpenOffice: Macro URL arbitrary script execution 2.7%
• CVE-2022-47502 Unrated Apache OpenOffice: Macro URL arbitrary script execution 1.0%
• CVE-2022-38745 High 7.8 Apache OpenOffice: Empty entry in Java class path 0.9%
• CVE-2022-37401 Unrated Apache OpenOffice Weak Master Keys 1.9%
• CVE-2022-37400 Unrated Apache OpenOffice Static Initialization Vector Allows to Recover Passwords for Web Connections Without Knowing the Master Password 1.0%
• CVE-2021-41832 Unrated Content Manipulation with Certificate Validation Attack 1.3%
• CVE-2021-41831 Unrated Timestamp Manipulation with Signature Wrapping 1.5%
• CVE-2021-41830 Unrated Double Certificate Attack 1.4%
• CVE-2021-40439 Unrated Billion Laughs 3.9%
• CVE-2021-28129 Unrated DEB packaging for Apache OpenOffice 4.1.8 installed with a non-root userid and groupid 0.5%
• CVE-2021-33035 Unrated Buffer overflow from a crafted DBF file 50.6%
• CVE-2021-30245 Unrated Code execution in Apache OpenOffice via non-http(s) schemes in Hyperlinks 4.9%