Elevated Code Execution Vulnerability in Apache OpenOffice by Apache
CVE-2026-59264

Currently unrated

Key Information:

Vendor

Apache
Status
Apache Openoffice
Vendor
CVE Published:
4 November 2026

What is CVE-2026-59264?

The Windows installers of Apache OpenOffice versions 4.1.16 and earlier are susceptible to an elevated code execution vulnerability. This flaw allows an attacker to execute arbitrary code with elevated privileges on a compromised system, potentially leading to unauthorized access and control. Users are advised to update to version 4.1.17 or later, which addresses and mitigates this security risk.

Affected Version(s)

Apache OpenOffice 0 <= 4.1.16

References

https://lists.apache.org/thread.html/d4n33sjk8jgrr78jj5cq...
vendor-advisory

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Kazuma Matsumoto, from GMO Cybersecurity by IERAE, Inc.
.