CVE-2026-59264

high

Description

The Windows installers of Apache OpenOffice 4.1.16 and earlier allow an already manipulated system to run external code with elevated access. Users are recommended to upgrade to version 4.1.17, which fixes this issue.

References

Advisories
More

https://lists.apache.org/thread.html/d4n33sjk8jgrr78jj5cq5r51fvxv6nnv

http://www.openwall.com/lists/oss-security/2026/11/03/22

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-116872

Details

Source: Mitre, NVD

Published: 2026-11-04

Updated: 2026-11-05

Risk Information

CVSS v2

Base Score: 7.2

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 7.8

Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H