CVE-2026-59264

EUVD-2026-116872
The Windows installers of Apache OpenOffice 4.1.16 and earlier allow an already manipulated system to run external code with elevated access.
Users are recommended to upgrade to version 4.1.17, which fixes this issue.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
apacheCNA
7.8 HIGH
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources (CNA/ADP records, vendor advisories, Enginsight analysis).
VendorProductVersionSource
apacheopenoffice
𝑥
≤ 4.1.16
CNA
Common Weakness Enumeration
Vulnerability Media Exposure
References
https://lists.apache.org/thread.html/d4n33sjk8jgrr78jj5cq5r51fvxv6nnv
http://www.openwall.com/lists/oss-security/2026/11/03/22