{"id":"CVE-2026-59264","kind":"vulnerability","aliases":["CVE-2026-59264"],"related":[],"title":"Apache OpenOffice Windows installers let a tampered system run code with elevated access","description":"The Windows installers of Apache OpenOffice 4.1.16 and earlier allow an already manipulated system to run external code with elevated access.\nUsers are recommended to upgrade to version 4.1.17, which fixes this issue.","summary":"The Windows installers of Apache OpenOffice 4.1.16 and earlier can be abused on a machine that is already compromised, so external code runs with elevated access. An attacker who already controls the system gains higher privileges through the installer.","severity":"low","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["desktop","openoffice","package","windows"],"not_affected_if":["not-windows","version-4.1.17-or-later"],"how_to_check":"- Check the installed OpenOffice version in Help > About on Windows, or look at the installed version in Add or Remove Programs\n- Flag any installation at `4.1.16` or earlier","fix":"- Apache OpenOffice `4.1.17`","status":"open","published_at":"2026-11-04T11:17:16+00:00","first_seen_at":"2026-11-04T11:26:46+00:00","triaged_at":"2026-11-04T11:27:45+00:00","updated_at":"2026-11-04T11:27:45+00:00","category":"package","confidence":0.6,"triage":{"at":"2026-11-04T11:27:45Z","model":"claude-haiku-5-5","output":{"fix":"- Apache OpenOffice `4.1.17`","reach":"local","title":"Apache OpenOffice Windows installers let a tampered system run code with elevated access","impact":"high","summary":"The Windows installers of Apache OpenOffice 4.1.16 and earlier can be abused on a machine that is already compromised, so external code runs with elevated access. An attacker who already controls the system gains higher privileges through the installer.","audience":"everyone","category":"package","nicknames":[],"who_cares":["windows","openoffice","desktop"],"confidence":0.6,"fix_status":"available","needs_auth":"yes","worst_case":"external code runs with elevated access on an already compromised Windows system","analyst_note":"","how_to_check":"- Check the installed OpenOffice version in Help > About on Windows, or look at the installed version in Add or Remove Programs\n- Flag any installation at `4.1.16` or earlier","plain_action":"Update Apache OpenOffice to version 4.1.17 on your Windows computer.","needs_analyst":false,"not_affected_if":["not-windows","version-4.1.17-or-later"],"who_is_affected":"Windows machines running Apache OpenOffice 4.1.16 or earlier, where the installer was used. The flaw needs a system that is already manipulated, so the risk is limited to attackers who already have a foothold. Teams that do not run OpenOffice on Windows can skip it.","user_interaction":"unknown","needs_special_setup":"no","severity_if_unknown":"low"},"cost_usd":0.000673,"input_tokens":4095,"output_tokens":526,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':15A,18A '-59264':16A,19A '4.1.16':30B,69C '4.1.17':91C 'abus':35B 'access':13A,49B,83C 'allow':72C 'alreadi':41B,53B,74C 'apach':1A,28B,67C 'attack':51B 'code':10A,45B,80C 'compromis':42B 'control':54B 'cve':14A,17A 'desktop':20B 'earlier':32B,71C 'elev':12A,48B,82C 'extern':44B,79C 'fix':93C 'gain':57B 'higher':58B 'instal':4A,26B,62B,65C 'issu':95C 'let':5A 'machin':38B 'manipul':75C 'openoffic':2A,21B,29B,68C 'packag':22B 'privileg':59B 'recommend':86C 'run':9A,46B,78C 'system':8A,56B,76C 'tamper':7A 'upgrad':88C 'user':84C 'version':90C 'window':3A,23B,25B,64C","nicknames":[],"mitigations":[],"who_affected":"Windows machines running Apache OpenOffice 4.1.16 or earlier, where the installer was used. The flaw needs a system that is already manipulated, so the risk is limited to attackers who already have a foothold. Teams that do not run OpenOffice on Windows can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"everyone","plain_action":"Update Apache OpenOffice to version 4.1.17 on your Windows computer.","pkeys":[],"ptokens":[],"labels":["desktop","low","openoffice","package","windows"],"campaign_type":null,"first_public_at":"2026-11-04T11:17:16+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-59264","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59264","severity":null,"published_at":"2026-11-04T11:17:16+00:00","modified_at":"2026-11-04T11:17:16+00:00","first_seen_at":"2026-11-04T11:26:46+00:00","fetched_at":"2026-11-04T11:26:46+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}