Vulnerability record/PUBLISHED/Published Nov 4, 2026 11:04:07 UTC

CVE-2026-90629

An uncontrolled memory access in the WMF import code of Apache OpenOffice versions through 4.1.16 allows a crafted WMF file to cause an invalid memory access, causing program crash or memory corruption. Users are recommended to upgrade to version 4.1.17, which fixes this issue.

Base scoreN/A/ 10

SeverityNoneCVSS unscored

Exploitability / impact

CVSS metric breakdown

Vector-derived attributes

Base severityNone

No CVSS vector is available for this record.

CVSS communicates standardized severity and impact characteristics. It does not establish whether a system is exploitable in your specific environment.

Record context

CVE Numbering Authorityapache

Last updatedNov 4, 2026 11:04:07 UTC

PublishedNov 4, 2026 11:04:07 UTC

ReservedSep 12, 2026 20:50:35 UTC

Credits

Anthropic and Ada Logics