What’s Vulnerable › Products

Apache Software Foundation Apache OpenOffice vulnerabilities

61 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Check whether your Apache Software Foundation Apache OpenOffice version is affected

Latest Apache Software Foundation Apache OpenOffice vulnerabilities

• CVE-2026-59265 — Apache OpenOffice, Apache OpenOffice: Opening a malicious document can lead to system takeover (CVSS 8.8)
• CVE-2025-64407 — Apache OpenOffice: URL fetching can be used to exfiltrate arbitrary INI file values and environment variables (CVSS 5.3)
• CVE-2025-64406 — Apache OpenOffice: Possible memory corruption during CSV import (CVSS 4.3)
• CVE-2025-64405 — Apache OpenOffice: Remote documents loaded without prompt via DDE function (CVSS 7.5)
• CVE-2025-64404 — Apache OpenOffice: Remote documents loaded without prompt via background and bullet images (CVSS 7.5)
• CVE-2025-64403 — Apache OpenOffice: Remote documents loaded without prompt via "external data sources" in Calc (CVSS 8.1)
• CVE-2025-64402 — Apache OpenOffice: Remote documents loaded without prompt via OLE objects (CVSS 6.5)
• CVE-2025-64401 — Apache OpenOffice: Remote documents loaded without prompt via IFrame (CVSS 7.5)
• CVE-2023-47804 — Apache OpenOffice: Macro URL arbitrary script execution (CVSS 8.8)
• CVE-2022-47502 — Apache OpenOffice: Macro URL arbitrary script execution (CVSS 7.8)
• CVE-2022-38745 — Apache OpenOffice: Empty entry in Java class path (CVSS 7.8)
• CVE-2022-37401 — Apache OpenOffice Weak Master Keys (CVSS 8.8)
• CVE-2022-37400 — Apache OpenOffice Static Initialization Vector Allows to Recover Passwords for Web Connections Without Knowing the Master Password (CVSS 8.8)
• CVE-2021-41832 — Content Manipulation with Certificate Validation Attack (CVSS 7.5)
• CVE-2021-41831 — Timestamp Manipulation with Signature Wrapping (CVSS 5.3)
• CVE-2021-41830 — Double Certificate Attack (CVSS 7.5)
• CVE-2021-40439 — Billion Laughs (CVSS 6.5)
• CVE-2021-28129 — DEB packaging for Apache OpenOffice 4.1.8 installed with a non-root userid and groupid (CVSS 7.8)
• CVE-2021-33035 — Buffer overflow from a crafted DBF file (CVSS 7.8)
• CVE-2021-30245 — Code execution in Apache OpenOffice via non-http(s) schemes in Hyperlinks (CVSS 8.8)
• CVE-2020-13958 — (CVSS 7.8)
• CVE-2012-5639 — (CVSS 6.5)
• CVE-2011-2177 — (CVSS 7.8)
• CVE-2018-11790 — (CVSS 7.8)
• CVE-2018-10583 — (CVSS 7.5)