Vulnerability record/PUBLISHED/Published Nov 4, 2026 11:02:42 UTC

CVE-2026-59264

The Windows installers of Apache OpenOffice 4.1.16 and earlier allow an already manipulated system to run external code with elevated access. Users are recommended to upgrade to version 4.1.17, which fixes this issue.

Base scoreN/A/ 10

SeverityNoneCVSS unscored

Exploitability / impact

CVSS metric breakdown

Vector-derived attributes

Base severityNone

No CVSS vector is available for this record.

CVSS communicates standardized severity and impact characteristics. It does not establish whether a system is exploitable in your specific environment.

Record context

CVE Numbering Authorityapache

Last updatedNov 4, 2026 11:02:42 UTC

PublishedNov 4, 2026 11:02:42 UTC

ReservedJul 4, 2026 15:34:24 UTC

Credits

Kazuma Matsumoto, from GMO Cybersecurity by IERAE, Inc.