---
id: "CVE-2026-59263"
kind: "vulnerability"
aliases: ["CVE-2026-59263"]
title: "Apache OpenOffice: crafted document can display substituted content to users"
severity: "low"
cvss: 1.9
epss: null
exploited: false
status: "open"
category: "package"
products: []
ecosystems: []
tags: ["desktop", "openoffice", "package"]
not_affected_if: ["trusted-documents-only", "version-4.1.17-or-later"]
published_at: "2026-11-04T11:17:16+00:00"
first_seen_at: "2026-11-04T11:26:45+00:00"
updated_at: "2026-11-04T11:27:35+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59263", "first_seen_at": "2026-11-04T11:26:45+00:00"}]
---

# Apache OpenOffice: crafted document can display substituted content to users

A manipulated document opened in Apache OpenOffice 4.1.16 or earlier can display substituted content that misleads the user. The sources describe the risk as manipulation of the reader rather than code execution.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed OpenOffice version via Help > About in the application
- Confirm whether the installed version is `4.1.16` or earlier

## Fix

- Upgrade Apache OpenOffice to `4.1.17`

## Timeline

- 2026-11-04T11:26:45+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-59263

## From the sources

A manipulated document opened in Apache OpenOffice 4.1.16 or earlier may allow substituted content to be displayed manipulating the user. Such documents are corrupt and should not be opened.
Users are recommended to upgrade to version 4.1.17, which fixes this issue.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_