CVE-2021-41830

CVSS 3.1: 7.5 high
EPSS: 1%p71
Published: Oct 11, 2021 · Oct 11, 2021
Modified: Jun 17, 2026

Analyze CVE-2021-41830 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

It is possible for an attacker to manipulate signed documents and macros to appear to come from a trusted source. All versions of Apache OpenOffice up to 4.1.10 are affected. Users are advised to update to version 4.1.11. See CVE-2021-25633 for the LibreOffice advisory.

Vendors: apache

Products: openoffice

Weakness: CWE-347

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (1.4%)

In the news

2 stories

Apache OpenOffice users should upgrade to newest security release!

Help Net SecurityApr 22, 12:07 UTC · Apr 22, 2025VulnerabilityCVE-2021-33035 CVE-2021-40439 CVE-2021-41830+33 · 1 read

Digital Signature Spoofing Flaws Uncovered in OpenOffice and LibreOffice

The Hacker NewsOct 12, 15:18 UTC · Oct 12, 2021VulnerabilityCVE-2021-41830 CVE-2021-25633 CVE-2021-41831+32 · 2 reads