Vulnerability record/PUBLISHED/Published Nov 4, 2026 11:05:00 UTC
CVE-2026-90632
Apache OpenOffice documents can include multimedia content (audio, video, etc.) A crafted document could exploit the GStreamer multimedia component of Apache OpenOffice version through 4.1.16 to load the contents of any local file, and include them when the document is saved or exported, for example as PDF. Users are recommended to upgrade to version 4.1.17, which fixes this issue.
Base scoreN/A/ 10
SeverityNoneCVSS unscored
Exploitability / impact
CVSS metric breakdown
Base severityNone
No CVSS vector is available for this record.
CVSS communicates standardized severity and impact characteristics. It does not establish whether a system is exploitable in your specific environment.
Record context
CVE Numbering Authorityapache
Last updatedNov 4, 2026 11:05:00 UTC
PublishedNov 4, 2026 11:05:00 UTC
ReservedSep 12, 2026 20:52:24 UTC
Credits
- Edoardo Geraci and Thomas Rinsma of Codean Labs