Apache OpenOffice documents could display different data when opened with different programs (CVE-2026-59263)
Original title: CVE-2026-59263: Apache OpenOffice: Carefully crafted documents could display different data when opened with different programs, instead of being reported as corrupt.
Manipulated documents in Apache OpenOffice 4.1.16 and earlier may display substituted content instead of being reported as corrupt.
A manipulated document opened in Apache OpenOffice 4.1.16 or earlier may allow substituted content to be displayed manipulating the user. Such documents are corrupt and should not be opened. Users are recommended to upgrade to version 4.1.17, which fixes this issue.
- Affected versions: Apache OpenOffice through 4.1.16
- Upgrade to 4.1.17 fixes the issue
- Severity: low
Impact: display of substituted content
| Product | Affected | Fixed in |
|---|---|---|
| Apache OpenOffice | through 4.1.16 | 4.1.17 |
- 1.Upgrade to version 4.1.17
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-59263 | — | — | — |
From the original article
Posted by Arrigo Marchiori on Nov 03 Severity: CVSS 4. 0: 1. 9 (low) CVSS:4.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.