---
id: CVE-2026-59263
title: >-
  Apache OpenOffice: Carefully crafted documents could display different data
  when opened with different programs, instead of being reported as corrupt.
summary: >-
  A manipulated document opened in Apache OpenOffice 4.1.16 or earlier may allow
  substituted content to be displayed manipulating the user. Such documents are
  corrupt and should not be opened.

  Users are recommended to upgrade to version 4.…
severity: low
cvss: 1.9
cvssVector: >-
  CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:L/SI:L/SA:N/E:P/S:P/AU:N/R:A/U:Green
cvssSource: cna
cwe:
  - CWE-349
vendor: Apache Software Foundation
product: Apache OpenOffice
affected:
  - apache_openoffice <= 4.1.16
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-04T14:34:30.359760Z'
published: '2026-11-04'
updated: '2026-11-04'
sourceUpdated: '2026-11-04T15:18:54.875Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-59263'
references:
  - url: 'https://lists.apache.org/thread.html/drr0ss9wrkq0omlrwjhcm8738pjx3xgd'
tags:
  - cve.org
ingestedAt: '2026-11-05T21:36:00.428Z'
---

## Overview

A manipulated document opened in Apache OpenOffice 4.1.16 or earlier may allow substituted content to be displayed manipulating the user. Such documents are corrupt and should not be opened.
Users are recommended to upgrade to version 4.1.17, which fixes this issue.

## Affected

- `apache_openoffice <= 4.1.16`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.