{"affected":[{"defaultStatus":"unaffected","ecosystem":"software-id","packageName":"apache.org/openoffice","product":"Apache OpenOffice","source":"CNA: apache","vendor":"Apache Software Foundation","versions":[{"lessThanOrEqual":"4.1.16","status":"affected","version":"0","versionType":"semver"}]}],"cveId":"CVE-2026-59263","cwes":["CWE-349"],"description":"A manipulated document opened in Apache OpenOffice 4.1.16 or earlier may allow substituted content to be displayed manipulating the user. Such documents are corrupt and should not be opened.\nUsers are recommended to upgrade to version 4.1.17, which fixes this issue.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":1.9,"severity":"low","source":"CNA: apache","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:L/SI:L/SA:N/E:P/S:P/AU:N/R:A/U:Green","version":"4.0"},{"score":1.9,"severity":"low","source":"NVD: security@apache.org","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:L/SI:L/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:N/R:A/V:X/RE:X/U:Green","version":"4.0"}],"modifiedAt":1793794382586,"publishedAt":1793790111518,"references":[{"source":"CNA: apache","tags":["vendor-advisory"],"url":"https://lists.apache.org/thread.html/drr0ss9wrkq0omlrwjhcm8738pjx3xgd"},{"source":"ADP: CVE","tags":[],"url":"http://www.openwall.com/lists/oss-security/2026/11/03/21"},{"source":"security@apache.org","tags":[],"url":"https://lists.apache.org/thread.html/drr0ss9wrkq0omlrwjhcm8738pjx3xgd"}],"remediation":[],"revision":"230a0b971f463759bdd1e966bcdd0aa72f1046673f60c0dcc632960dc8219704","sources":[{"modifiedAt":1793794382586,"name":"CNA: apache","retrievedAt":1793797837386,"url":"https://www.cve.org/CVERecord?id=CVE-2026-59263"},{"modifiedAt":1793791036393,"name":"NVD","retrievedAt":1793794575258,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59263"}],"ssvc":null,"status":"published","title":"Apache OpenOffice: Carefully crafted documents could display different data when opened with different programs, instead of being reported as corrupt.","updatedAt":1793797837386}