{"affected":[{"defaultStatus":"unaffected","ecosystem":"software-id","packageName":"apache.org/openoffice","product":"Apache OpenOffice","source":"CNA: apache","vendor":"Apache Software Foundation","versions":[{"lessThanOrEqual":"4.1.16","status":"affected","version":"0","versionType":"semver"}]}],"cveId":"CVE-2026-59264","cwes":["CWE-427"],"description":"The Windows installers of Apache OpenOffice 4.1.16 and earlier allow an already manipulated system to run external code with elevated access.\nUsers are recommended to upgrade to version 4.1.17, which fixes this issue.","epss":null,"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793794384936,"publishedAt":1793790162505,"references":[{"source":"CNA: apache","tags":["vendor-advisory"],"url":"https://lists.apache.org/thread.html/d4n33sjk8jgrr78jj5cq5r51fvxv6nnv"},{"source":"ADP: CVE","tags":[],"url":"http://www.openwall.com/lists/oss-security/2026/11/03/22"},{"source":"security@apache.org","tags":[],"url":"https://lists.apache.org/thread.html/d4n33sjk8jgrr78jj5cq5r51fvxv6nnv"}],"remediation":[],"revision":"69f8c3aafb1f93bbe447d4634f664fa805afe3cce18d6d4e78fe3f179b9088d6","sources":[{"modifiedAt":1793794384936,"name":"CNA: apache","retrievedAt":1793797838688,"url":"https://www.cve.org/CVERecord?id=CVE-2026-59264"},{"modifiedAt":1793791036577,"name":"NVD","retrievedAt":1793794575421,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59264"}],"ssvc":null,"status":"published","title":"Apache OpenOffice: Uncontrolled search path element vulnerability in Windows installer","updatedAt":1793797838688}