Authorization Vulnerability in Apache OpenOffice Calc Spreadsheet
CVE-2025-64403

8.1HIGH

Key Information:

Vendor

Apache
Status
Apache Openoffice
Vendor
CVE Published:
12 November 2025

What is CVE-2025-64403?

An authorization vulnerability in Apache OpenOffice Calc allows attackers to create malicious documents containing links to external data sources. These links may be loaded without user prompts, posing a significant risk of remote data access. Users of Apache OpenOffice, particularly those on version 4.1.15, are urged to upgrade to version 4.1.16 to mitigate this security issue.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Apache OpenOffice 0 <= 4.1.15

References

https://www.openoffice.org/security/cves/CVE-2025-64403.html
vendor-advisory
https://lists.apache.org/thread/t7c6jhvdb00xtgd9vvn7h5sq9...
vendor-advisory

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Reginaldo Silva of ubercomp.com
JSON
.