{"id":"CVE-2026-59268","kind":"vulnerability","aliases":["CVE-2026-59268"],"related":[],"title":"Apache OpenOffice: crafted Word document can crash it or corrupt memory","description":"An out-of-bounds Write vulnerability in Apache OpenOffice versions through 4.1.16 could allow an attacker to craft a Microsoft Word document that would crash the program, or otherwise corrupt other memory areas.\n\nUsers are recommended to upgrade to version 4.1.17, which fixes this issue.","summary":"Apache OpenOffice up to 4.1.16 has an out-of-bounds write triggered by a crafted Microsoft Word document. An attacker who gets a user to open that file can crash the program or corrupt other memory.","severity":"medium","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["desktop","document-conversion","openoffice","package"],"not_affected_if":["newer-version","not-installed"],"how_to_check":"- Check the installed OpenOffice version via Help > About in the application, or run `soffice --version` on the command line.\n- Flag any version up to and including `4.1.16`.","fix":"- Apache OpenOffice: upgrade to `4.1.17`.","status":"open","published_at":"2026-11-04T11:17:16+00:00","first_seen_at":"2026-11-04T11:26:46+00:00","triaged_at":"2026-11-04T11:27:44+00:00","updated_at":"2026-11-04T11:27:44+00:00","category":"package","confidence":0.6,"triage":{"at":"2026-11-04T11:27:44Z","model":"claude-haiku-5-5","output":{"fix":"- Apache OpenOffice: upgrade to `4.1.17`.","reach":"local","title":"Apache OpenOffice: crafted Word document can crash it or corrupt memory","impact":"medium","summary":"Apache OpenOffice up to 4.1.16 has an out-of-bounds write triggered by a crafted Microsoft Word document. An attacker who gets a user to open that file can crash the program or corrupt other memory.","audience":"everyone","category":"package","nicknames":[],"who_cares":["openoffice","desktop","document-conversion"],"confidence":0.6,"fix_status":"available","needs_auth":"no","worst_case":"Program crashes or corrupts memory; code execution not stated in sources","analyst_note":"","how_to_check":"- Check the installed OpenOffice version via Help > About in the application, or run `soffice --version` on the command line.\n- Flag any version up to and including `4.1.16`.","plain_action":"Update Apache OpenOffice to version 4.1.17 or later.","needs_analyst":false,"not_affected_if":["not-installed","newer-version"],"who_is_affected":"Anyone who opens Word documents in Apache OpenOffice 4.1.16 or earlier is exposed, most likely from email attachments or downloaded files. Servers or document-conversion pipelines that run OpenOffice on untrusted .doc files are also in scope. Teams not running OpenOffice can skip it.","user_interaction":"yes","needs_special_setup":"no","severity_if_unknown":"medium"},"cost_usd":0.000679,"input_tokens":4132,"output_tokens":532,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-59268':14A,17A '4.1.16':28B,73C '4.1.17':102C 'allow':75C 'apach':1A,24B,69C 'area':94C 'attack':44B,77C 'bound':34B,65C 'convers':21B 'corrupt':10A,58B,91C 'could':74C 'craft':3A,39B,79C 'crash':7A,54B,86C 'cve':12A,15A 'desktop':18B 'document':5A,20B,42B,83C 'document-convers':19B 'file':52B 'fix':104C 'get':46B 'issu':106C 'memori':11A,60B,93C 'microsoft':40B,81C 'open':50B 'openoffic':2A,22B,25B,70C 'otherwis':90C 'out-of-bound':31B,62C 'packag':23B 'program':56B,88C 'recommend':97C 'trigger':36B 'upgrad':99C 'user':48B,95C 'version':71C,101C 'vulner':67C 'word':4A,41B,82C 'would':85C 'write':35B,66C","nicknames":[],"mitigations":[],"who_affected":"Anyone who opens Word documents in Apache OpenOffice 4.1.16 or earlier is exposed, most likely from email attachments or downloaded files. Servers or document-conversion pipelines that run OpenOffice on untrusted .doc files are also in scope. Teams not running OpenOffice can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"everyone","plain_action":"Update Apache OpenOffice to version 4.1.17 or later.","pkeys":[],"ptokens":[],"labels":["desktop","documentconversion","medium","openoffice","package"],"campaign_type":null,"first_public_at":"2026-11-04T11:17:16+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-59268","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59268","severity":null,"published_at":"2026-11-04T11:17:16+00:00","modified_at":"2026-11-04T11:17:16+00:00","first_seen_at":"2026-11-04T11:26:46+00:00","fetched_at":"2026-11-04T11:26:46+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}