CVE-2026-59268

Description

An out-of-bounds Write vulnerability in Apache OpenOffice versions through 4.1.16 could allow an attacker to craft a Microsoft Word document that would crash the program, or otherwise corrupt other memory areas. Users are recommended to upgrade to version 4.1.17, which fixes this issue.

Affected products

Affected configurations (NVD)

CPE applicability statements from the NVD's analysis: 1 configuration, 1 CPE match. In a configuration marked “all of”, the vulnerable product is affected only together with the others listed (for example the hardware it runs on).

References

External links from the record. They lead to third-party sites.

• https://lists.apache.org/thread.html/xw6x0y35f3qlk4pqsc1pf0sv7481yvlk vendor-advisory
• http://www.openwall.com/lists/oss-security/2026/11/03/24