Apache
Apache Openoffice: vulnerabilidades y CVE
Apache Openoffice tiene 60 vulnerabilidades publicadas, 7 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE60
Últimos 12 meses7
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2025-64407 | Media (5.3) | 0.46% | — | 12 nov 2025 | Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. Such links… |
| CVE-2025-64406 | Media (4.3) | 0.51% | — | 12 nov 2025 | An out-of-bounds Write vulnerability in Apache OpenOffice could allow an attacker to craft a document that would crash the program, or otherwise corrupt other memory areas. This issue affects Apache OpenOffice: through… |
| CVE-2025-64405 | Alta (7.5) | 1.4% | — | 12 nov 2025 | Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. In the… |
| CVE-2025-64404 | Alta (7.5) | 1.2% | — | 12 nov 2025 | Apache OpenOffice documents can contain links to other files. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without… |
| CVE-2025-64403 | Alta (8.1) | 1.2% | — | 12 nov 2025 | Apache OpenOffice Calc spreadsheet can contain links to other files, in the form of "external data sources". A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would… |
| CVE-2025-64402 | Media (6.5) | 0.55% | — | 12 nov 2025 | Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. In the… |
| CVE-2025-64401 | Alta (7.5) | 0.86% | — | 12 nov 2025 | Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. In the… |
| CVE-2023-47804 | Alta (8.8) | 2.7% | — | 29 dic 2023 | Apache OpenOffice documents can contain links that call internal macros with arbitrary arguments. Several URI Schemes are defined for this purpose. Links can be activated by clicks, or by automatic document events. The… |
| CVE-2022-47502 | Alta (7.8) | 0.96% | — | 24 mar 2023 | Apache OpenOffice documents can contain links that call internal macros with arbitrary arguments. Several URI Schemes are defined for this purpose. Links can be activated by clicks, or by automatic document events. The… |
| CVE-2022-38745 | Alta (7.8) | 0.87% | — | 24 mar 2023 | Apache OpenOffice versions before 4.1.14 may be configured to add an empty entry to the Java class path. This may lead to run arbitrary Java code from the current directory. |
| CVE-2022-37401 | Alta (8.8) | 1.8% | — | 15 ago 2022 | Apache OpenOffice supports the storage of passwords for web connections in the user's configuration database. The stored passwords are encrypted with a single master key provided by the user. A flaw in OpenOffice… |
| CVE-2022-37400 | Alta (8.8) | 0.94% | — | 15 ago 2022 | Apache OpenOffice supports the storage of passwords for web connections in the user's configuration database. The stored passwords are encrypted with a single master key provided by the user. A flaw in OpenOffice… |
| CVE-2021-41832 | Alta (7.5) | 1.3% | — | 11 oct 2021 | It is possible for an attacker to manipulate documents to appear to be signed by a trusted source. All versions of Apache OpenOffice up to 4.1.10 are affected. Users are advised to update to version 4.1.11. See… |
| CVE-2021-41831 | Media (5.3) | 1.5% | — | 11 oct 2021 | It is possible for an attacker to manipulate the timestamp of signed documents. All versions of Apache OpenOffice up to 4.1.10 are affected. Users are advised to update to version 4.1.11. See CVE-2021-25634 for the… |
| CVE-2021-41830 | Alta (7.5) | 1.4% | — | 11 oct 2021 | It is possible for an attacker to manipulate signed documents and macros to appear to come from a trusted source. All versions of Apache OpenOffice up to 4.1.10 are affected. Users are advised to update to version… |
| CVE-2021-40439 | Media (6.5) | 3.9% | — | 7 oct 2021 | Apache OpenOffice has a dependency on expat software. Versions prior to 2.1.0 were subject to CVE-2013-0340 a "Billion Laughs" entity expansion denial of service attack and exploit via crafted XML files. ODF files… |
| CVE-2021-28129 | Alta (7.8) | 0.53% | — | 7 oct 2021 | While working on Apache OpenOffice 4.1.8 a developer discovered that the DEB package did not install using root, but instead used a userid and groupid of 500. This both caused issues with desktop integration and could… |
| CVE-2021-33035 | Alta (7.8) | 51% | — | 23 sept 2021 | Apache OpenOffice opens dBase/DBF documents and shows the contents as spreadsheets. DBF are database files with data organized in fields. When reading DBF data the size of certain fields is not checked: the data is just… |
| CVE-2021-30245 | Alta (8.8) | 4.9% | — | 15 abr 2021 | The project received a report that all versions of Apache OpenOffice through 4.1.8 can open non-http(s) hyperlinks. The problem has existed since about 2006 and the issue is also in 4.1.9. If the link is specifically… |
| CVE-2020-13958 | Alta (7.8) | 2.9% | — | 17 nov 2020 | A vulnerability in Apache OpenOffice scripting events allows an attacker to construct documents containing hyperlinks pointing to an executable on the target users file system. These hyperlinks can be triggered… |
| CVE-2012-5639 | Media (6.5) | 5.8% | — | 20 dic 2019 | LibreOffice and OpenOffice automatically open embedded content |
| CVE-2011-2177 | Alta (7.8) | 2.0% | — | 27 nov 2019 | OpenOffice.org v3.3 allows execution of arbitrary code with the privileges of the user running the OpenOffice.org suite tools. |
| CVE-2018-11790 | Alta (7.8) | 1.0% | — | 31 ene 2019 | When loading a document with Apache Open Office 4.1.5 and earlier with smaller end line termination than the operating system uses, the defect occurs. In this case OpenOffice runs into an Arithmetic Overflow at a string… |
| CVE-2018-10583 | Alta (7.5) | 78% | — | 1 may 2018 | An information disclosure vulnerability occurs when LibreOffice 6.0.3 and Apache OpenOffice Writer 4.1.5 automatically process and initiate an SMB connection embedded in a malicious file, as demonstrated by… |
| CVE-2017-3157 | Media (5.5) | 3.1% | — | 20 nov 2017 | By exploiting the way Apache OpenOffice before 4.1.4 renders embedded objects, an attacker could craft a document that allows reading in a file from the user's filesystem. Information could be retrieved by the attacker… |
| CVE-2017-12608 | Alta (7.8) | 2.9% | — | 20 nov 2017 | A vulnerability in Apache OpenOffice Writer DOC file parser before 4.1.4, and specifically in ImportOldFormatStyles, allows attackers to craft malicious documents that cause denial of service (memory corruption and… |
| CVE-2017-12607 | Alta (7.8) | 2.6% | — | 20 nov 2017 | A vulnerability in OpenOffice's PPT file parser before 4.1.4, and specifically in PPTStyleSheet, allows attackers to craft malicious documents that cause denial of service (memory corruption and application crash)… |
| CVE-2017-9806 | Alta (7.8) | 1.8% | — | 20 nov 2017 | A vulnerability in the OpenOffice Writer DOC file parser before 4.1.4, and specifically in the WW8Fonts Constructor, allows attackers to craft malicious documents that cause denial of service (memory corruption and… |
| CVE-2016-6804 | Alta (7.8) | 3.0% | — | 20 nov 2017 | The Apache OpenOffice installer (versions prior to 4.1.3, including some branded as OpenOffice.org) for Windows contains a defective operation that allows execution of arbitrary code with elevated privileges. This… |
| CVE-2016-6803 | Alta (7.8) | 2.1% | — | 13 nov 2017 | An installer defect known as an "unquoted Windows search path vulnerability" affected the Apache OpenOffice before 4.1.3 installers for Windows. The PC must have previously been infected by a Trojan Horse application… |