CVE-2026-59268

EUVD-2026-116873
An out-of-bounds Write vulnerability in Apache OpenOffice versions through 4.1.16 could allow an attacker to craft a Microsoft Word document that would crash the program, or otherwise corrupt other memory areas.

Users are recommended to upgrade to version 4.1.17, which fixes this issue.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
apacheCNA
7.3 HIGH
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources (CNA/ADP records, vendor advisories, Enginsight analysis).
VendorProductVersionSource
apacheopenoffice
𝑥
≤ 4.1.16
CNA
Common Weakness Enumeration
Vulnerability Media Exposure
References
https://lists.apache.org/thread.html/xw6x0y35f3qlk4pqsc1pf0sv7481yvlk
http://www.openwall.com/lists/oss-security/2026/11/03/24