{"id":"CVE-2026-59263","published":"2026-11-04T11:17:16.393","lastModified":"2026-11-04T16:17:52.237","description":"A manipulated document opened in Apache OpenOffice 4.1.16 or earlier may allow substituted content to be displayed manipulating the user. Such documents are corrupt and should not be opened.\nUsers are recommended to upgrade to version 4.1.17, which fixes this issue.","cvssScore":5.5,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cwes":["CWE-349"],"vendors":["apache"],"products":["openoffice"],"references":[{"url":"https://lists.apache.org/thread.html/drr0ss9wrkq0omlrwjhcm8738pjx3xgd","tags":["Mailing List","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2026/11/03/21","tags":["Mailing List","Third Party Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":null}