---
id: "CVE-2026-59264"
kind: "vulnerability"
aliases: ["CVE-2026-59264"]
title: "Apache OpenOffice Windows installers let a tampered system run code with elevated access"
severity: "low"
cvss: null
epss: null
exploited: false
status: "open"
category: "package"
products: []
ecosystems: []
tags: ["desktop", "openoffice", "package", "windows"]
not_affected_if: ["not-windows", "version-4.1.17-or-later"]
published_at: "2026-11-04T11:17:16+00:00"
first_seen_at: "2026-11-04T11:26:46+00:00"
updated_at: "2026-11-04T11:27:45+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59264", "first_seen_at": "2026-11-04T11:26:46+00:00"}]
---

# Apache OpenOffice Windows installers let a tampered system run code with elevated access

The Windows installers of Apache OpenOffice 4.1.16 and earlier can be abused on a machine that is already compromised, so external code runs with elevated access. An attacker who already controls the system gains higher privileges through the installer.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed OpenOffice version in Help > About on Windows, or look at the installed version in Add or Remove Programs
- Flag any installation at `4.1.16` or earlier

## Fix

- Apache OpenOffice `4.1.17`

## Timeline

- 2026-11-04T11:26:46+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-59264

## From the sources

The Windows installers of Apache OpenOffice 4.1.16 and earlier allow an already manipulated system to run external code with elevated access.
Users are recommended to upgrade to version 4.1.17, which fixes this issue.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_