Security Vulnerabilities
Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links
to be loaded without prompt, possibly transferring the contents of environment variables in the process.
This issue affects Apache OpenOffice: through 4.1.16.
Users are recommended to upgrade to version 4.1.17, which fixes the issue.
CVSS Score
3.3
EPSS Score
0.002
Published
2026-11-04
Apache OpenOffice documents can include multimedia content (audio, video, etc.)
A crafted document could exploit the GStreamer multimedia component of Apache OpenOffice version through 4.1.16 to load the contents of any local file, and include them when the document is saved or exported, for example as PDF.
Users are recommended to upgrade to version 4.1.17, which fixes this issue.
CVSS Score
5.5
EPSS Score
0.002
Published
2026-11-04
An uncontrolled memory access in the PDF import code of Apache OpenOffice versions through 4.1.16 allows a crafted PDF to cause an out-of-bounds memory write, causing program crash or memory corruption.
Users are recommended to upgrade to version 4.1.17, which fixes this issue.
CVSS Score
7.3
EPSS Score
0.002
Published
2026-11-04
An unchecked memory access in the PDF import code of Apache OpenOffice versions through 4.1.16 on allows a crafted PDF to execute an out-of-bounds memory write. This could crash the program or cause memory corruption.
Users are recommended to upgrade to version 4.1.17, which fixes this issue.
CVSS Score
7.3
EPSS Score
0.002
Published
2026-11-04
A manipulated document opened in Apache OpenOffice 4.1.16 or earlier may allow substituted content to be displayed manipulating the user. Such documents are corrupt and should not be opened.
Users are recommended to upgrade to version 4.1.17, which fixes this issue.
CVSS Score
1.9
EPSS Score
0.002
Published
2026-11-04
The Windows installers of Apache OpenOffice 4.1.16 and earlier allow an already manipulated system to run external code with elevated access.
Users are recommended to upgrade to version 4.1.17, which fixes this issue.
CVSS Score
7.8
EPSS Score
0.002
Published
2026-11-04
An out-of-bounds Write vulnerability in Apache OpenOffice versions through 4.1.16 could allow an attacker to craft a Microsoft Word document that would crash the program, or otherwise corrupt other memory areas.
Users are recommended to upgrade to version 4.1.17, which fixes this issue.
CVSS Score
7.3
EPSS Score
0.002
Published
2026-11-04
Tanium addressed an information disclosure vulnerability in Discover.
CVSS Score
4.3
EPSS Score
0.002
Published
2026-11-03
Tanium addressed an improper access controls vulnerability in Discover.
CVSS Score
4.2
EPSS Score
0.001
Published
2026-11-03
Tanium addressed an uncontrolled resource consumption vulnerability in Discover.
CVSS Score
4.3
EPSS Score
0.003
Published
2026-11-03