CVE-2026-59264 · Package
NO FIX YET · SEE WHAT TO DO
The Windows installers of Apache OpenOffice 4.1.16 and earlier can be abused on a machine that is already compromised, so external code runs with elevated access. An attacker who already controls the system gains higher privileges through the installer.
first public Nov 4, 2026 · 1 source
Is this in your stack? Find out in 2 minutes.
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
Windows machines running Apache OpenOffice 4.1.16 or earlier, where the installer was used. The flaw needs a system that is already manipulated, so the risk is limited to attackers who already have a foothold. Teams that do not run OpenOffice on Windows can skip it.
Not affected if not-windows, version-4.1.17-or-later
Who cares desktop, openoffice, windows
4.1.16 or earlier4.1.17The Windows installers of Apache OpenOffice 4.1.16 and earlier allow an already manipulated system to run external code with elevated access. Users are recommended to upgrade to version 4.1.17, which fixes this issue.
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.