As cited
Copy frozen at (site build).
vulnerabilities
CVE-2026-59264: Apache OpenOffice: Uncontrolled search path element vulnerability in Windows installer
CVE-2026-59264 is a moderate-severity vulnerability in Apache OpenOffice Windows installers through version 4.1.16 that allows elevated code execution on systems where the search path has already been manipulated. The vendor issued a patch in version 4.1.17 to address the flaw.
Why it matters: Organizations deploying Apache OpenOffice on Windows should upgrade to 4.1.17 to prevent privilege escalation attacks that could compromise systems already compromised by malware or insider threats capable of modifying search paths.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
CVE-2026-59264: Apache OpenOffice: Uncontrolled search path element vulnerability in Windows installer
CVE-2026-59264 affects Apache OpenOffice through version 4.1.16 on Windows, where the installer contains an uncontrolled search path element vulnerability that could allow elevated code execution on a compromised system. Apache has released version 4.1.17 to address the flaw.
Why it matters: Organizations deploying Apache OpenOffice on Windows should upgrade to 4.1.17 to prevent privilege escalation attacks that exploit the Windows installer vulnerability during installation or update operations.
- Source published
- First seen by Cybersecurity Tracker