CYBERSECURITYTRACKER
Permanent story citation

CVE-2026-59268: Apache OpenOffice: Heap out-of-bounds write in WW8 PLCF reader

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 12284

As cited

Copy frozen at (site build).

vulnerabilities

CVE-2026-59268: Apache OpenOffice: Heap out-of-bounds write in WW8 PLCF reader

CVE-2026-59268 is a heap out-of-bounds write vulnerability in Apache OpenOffice through version 4.1.16 triggered by specially crafted Microsoft Word documents. An attacker could exploit this flaw to crash the application or corrupt memory. The vendor recommends upgrading to version 4.1.17 to resolve the issue.

Why it matters: Users of Apache OpenOffice 4.1.16 and earlier who open untrusted Word documents face potential application crashes and memory corruption; update to 4.1.17 immediately.

VendorsMicrosoft
Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

vulnerabilities

CVE-2026-59268: Apache OpenOffice: Heap out-of-bounds write in WW8 PLCF reader

A heap out-of-bounds write vulnerability in Apache OpenOffice through version 4.1.16 could allow attackers to crash the application or corrupt memory by crafting a malicious Microsoft Word document. Apache OpenOffice 4.1.17 addresses this issue.

Why it matters: Users of Apache OpenOffice 4.1.16 and earlier should upgrade to 4.1.17 to prevent denial of service and potential memory corruption from specially crafted documents.

VendorsMicrosoft
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary