| Opening a malicious document can lead to system takeover. CVE-2026-59265 AI Apache OpenOfficeで悪意あるドキュメントを開くことでシステムが乗っ取られる可能性がある脆弱性が報告されている。 固定リンク | 2026-10-03 | Critical | CVE-2026-59265 |
| URL fetching can be used to exfiltrate arbitrary INI file values and environment variables. CVE-2025-64407 | — | — | CVE-2025-64407 |
| Possible memory corruption during CSV import. CVE-2025-64406 | — | — | CVE-2025-64406 |
| Remote documents loaded without prompt via DDE function. CVE-2025-64405 | — | — | CVE-2025-64405 |
| Remote documents loaded without prompt via background and bullet images. CVE-2025-64404 | — | — | CVE-2025-64404 |
| Remote documents loaded without prompt via "external data sources" in Calc. CVE-2025-64403 | — | — | CVE-2025-64403 |
| Remote documents loaded without prompt via OLE objects. CVE-2025-64402 | — | — | CVE-2025-64402 |
| Remote documents loaded without prompt via IFrame. CVE-2025-64401 | — | — | CVE-2025-64401 |
| Macro URL arbitrary script execution CVE-2023-47804 | — | — | CVE-2023-47804 |
| Arbitrary file write in Base CVE-2023-1183 | — | — | CVE-2023-1183 |
| Macro URL arbitrary script execution without warning CVE-2022-47502 | — | — | CVE-2022-47502 |
| "Use after free" fixed in expat >= 2.4.9 CVE-2022-43680 | — | — | CVE-2022-43680 |
| "Use after free" fixed in expat >= 2.4.9 CVE-2022-40674 | — | — | CVE-2022-40674 |
| An empty class path may lead to run arbitrary Java code CVE-2022-38745 | — | — | CVE-2022-38745 |
| Weak Master Keys CVE-2022-37401 | — | — | CVE-2022-37401 |
| Static Initialization Vector Allows to Recover Passwords for Web Connections Without Knowing the Master Password CVE-2022-37400 | — | — | CVE-2022-37400 |
| #4 Content Manipulation with Certificate Validation Attack CVE-2021-41832 | — | — | CVE-2021-41832 |
| #3 Timestamp Manipulation with Signature Wrapping CVE-2021-41831 | — | — | CVE-2021-41831 |
| #1 Content Manipulation with Certificate Double Attack CVE-2021-41830 | — | — | CVE-2021-41830 |
| "Billion Laughs" fixed in Expat >=2.4.0 CVE-2021-40439 | — | — | CVE-2021-40439 |
| Buffer overflow from a crafted DBF file CVE-2021-33035 | — | — | CVE-2021-33035 |
| Code execution in Apache OpenOffice via non-http(s) schemes in Hyperlinks CVE-2021-30245 | — | — | CVE-2021-30245 |
| DEB packaging installed with a non-root userid and groupid CVE-2021-28129 | — | — | CVE-2021-28129 |
| Unrestricted actions leads to arbitrary code execution in crafted documents CVE-2020-13958 | — | — | CVE-2020-13958 |
| Insufficient URL decoding flaw in categorizing macro location CVE-2019-9853 | — | — | CVE-2019-9853 |
| Arithmetic overflow and wrap around during string length calculation CVE-2018-11790 | — | — | CVE-2018-11790 |
| Out-of-Bounds Write in Writer's ImportOldFormatStyles CVE-2017-12608 | — | — | CVE-2017-12608 |
| Out-of-Bounds Write in Impress' PPT Filter CVE-2017-12607 | — | — | CVE-2017-12607 |
| Out-of-Bounds Write in Writer's WW8Fonts Constructor CVE-2017-9806 | — | — | CVE-2017-9806 |
| Arbitrary file disclosure in Calc and Writer CVE-2017-3157 | — | — | CVE-2017-3157 |
| Windows Installer Execution of Arbitrary Code with Elevated Privileges CVE-2016-6804 | — | — | CVE-2016-6804 |
| Windows Installer Can Enable Privileged Trojan Execution CVE-2016-6803 | — | — | CVE-2016-6803 |
| Memory Corruption Vulnerability (Impress Presentations) CVE-2016-1513 | — | — | CVE-2016-1513 |
| .DOC Bookmarks Vulnerability CVE-2015-5214 | — | — | CVE-2015-5214 |
| .DOC Document Vulnerability CVE-2015-5213 | — | — | CVE-2015-5213 |
| ODF Printer Settings Vulnerability CVE-2015-5212 | — | — | CVE-2015-5212 |
| Targeted Data Disclosure CVE-2015-4551 | — | — | CVE-2015-4551 |
| Out-of-Bounds Write in HWP File Filter CVE-2015-1774 | — | — | CVE-2015-1774 |
| Targeted Data Exposure Using Crafted OLE Objects in Apache OpenOffice CVE-2014-3575 | — | — | CVE-2014-3575 |
| Calc Command Injection Vulnerability in Apache OpenOffice CVE-2014-3524 | — | — | CVE-2014-3524 |
| DOCM Memory Corruption Vulnerability in Apache OpenOffice CVE-2013-4156 | — | — | CVE-2013-4156 |
| DOC Memory Corruption Vulnerability in Apache OpenOffice CVE-2013-2189 | — | — | CVE-2013-2189 |
| Frame Injection Vulnerability in SDK JavaDoc CVE-2013-1571 | — | — | CVE-2013-1571 |
| Loading internal / external resource without warning. CVE-2012-5639 | — | — | CVE-2012-5639 |
| Manifest-processing errors in Apache OpenOffice 3.4.0 CVE-2012-2665 | — | — | CVE-2012-2665 |
| Vulnerabilities related to malformed Powerpoint files in OpenOffice.org 3.3.0 CVE-2012-2334 | — | — | CVE-2012-2334 |
| OpenOffice.org memory overwrite vulnerability CVE-2012-2149 | — | — | CVE-2012-2149 |
| OpenOffice.org integer overflow error in vclmi.dll module when allocating memory for an embedded image object CVE-2012-1149 | — | — | CVE-2012-1149 |
| OpenOffice.org data leakage vulnerability CVE-2012-0037 | — | — | CVE-2012-0037 |
| Security Vulnerability in OpenOffice.org related to TGA file processing CVE-2010-4643 | — | — | CVE-2010-4643 |
| Security Vulnerability in OpenOffice.org related to PNG file processing CVE-2010-4253 | — | — | CVE-2010-4253 |
| Possible Security Vulnerability in OpenOffice.org resulting from 3rd party library LIBXML2 CVE-2010-4008 | — | — | CVE-2010-4008, CVE-2010-4494 |
| Security Vulnerability in OpenOffice.org's PDF Import extension resulting from 3rd party library XPDF CVE-2010-3702 | — | — | CVE-2010-3702, CVE-2010-3704 |
| Insecure LD_LIBRARY_PATH usage in OpenOffice.org shell scripts CVE-2010-3689 | — | — | CVE-2010-3689 |
| Security Vulnerability in OpenOffice.org related to Word document processing CVE-2010-3453 | — | — | CVE-2010-3453, CVE-2010-3454 |
| Security Vulnerability in OpenOffice.org related to RTF document processing CVE-2010-3451 | — | — | CVE-2010-3451, CVE-2010-3452 |
| Security Vulnerability in OpenOffice.org related to Extensions and filter package files CVE-2010-3450 | — | — | CVE-2010-3450 |
| Security Vulnerability in OpenOffice.org related to PowerPoint document processing CVE-2010-2935 | — | — | CVE-2010-2935, CVE-2010-2936 |
| Security vulnerability in OpenOffice.org related to python scripting CVE-2010-0395 | — | — | CVE-2010-0395 |
| OpenOffice.org 2 and 3 may be affected by the TLS/SSL Renegotiation Issue in 3rd Party Libraries CVE-2009-3555 | — | — | CVE-2009-3555 |
| Potential vulnerability related to MS-Word document processing CVE-2009-3301 | — | — | CVE-2009-3301 |
| Potential vulnerability related to GIF file processing CVE-2009-2950 | — | — | CVE-2009-2950 |
| Potential vulnerability related to XPM file processing CVE-2009-2949 | — | — | CVE-2009-2949 |
| OpenOffice.org 3 for Windows bundles a vulnerable version of MSVC Runtime CVE-2009-2493 | — | — | CVE-2009-2493 |
| Manipulated XML documents can lead to arbitrary code execution CVE-2009-2414 | — | — | CVE-2009-2414, CVE-2009-2416 |
| Potential vulnerability from 3rd party libxmlsec libraries CVE-2009-0217 | — | — | CVE-2009-0217 |
| Manipulated Microsoft Word files can lead to heap overflows and arbitrary code execution CVE-2009-0200 | — | — | CVE-2009-0200, CVE-2009-0201 |
| Manipulated EMF files can lead to heap overflows and arbitrary code execution CVE-2008-2238 | — | — | CVE-2008-2238 |
| Manipulated WMF files can lead to heap overflows and arbitrary code execution CVE-2008-2237 | — | — | CVE-2008-2237 |
| Different kinds of manipulated files may lead to heap overflows and arbitrary code execution CVE-2008-2152 | — | — | CVE-2008-2152 |
| Manipulated OLE files can lead to heap overflows and arbitrary code execution CVE-2008-0320 | — | — | CVE-2008-0320 |
| Manipulated EMF files can lead to heap overflows and arbitrary code execution CVE-2007-5746 | — | — | CVE-2007-5746 |
| Manipulated Quattro Pro files can lead to heap overflows and arbitrary code execution CVE-2007-5745 | — | — | CVE-2007-5745 |
| Manipulated ODF text documents containing XForms can lead to heap overflows and arbitrary code execution CVE-2007-4770 | — | — | CVE-2007-4770 |
| Potential arbitrary code execution vulnerability in 3rd party module (HSQLDB) CVE-2007-4575 | — | — | CVE-2007-4575 |
| Manipulated TIFF files can lead to heap overflows and arbitrary code execution CVE-2007-2834 | — | — | CVE-2007-2834 |
| Integer overflow and heap-based buffer overflow vulnerability in 3rd party module (freetype) CVE-2007-2754 | — | — | CVE-2007-2754 |
| Manipulated RTF files can lead to heap overflows and arbitrary code execution CVE-2007-0245 | — | — | CVE-2007-0245 |
| URL Handling Security Vulnerability (Linux/Solaris) CVE-2007-0239 | — | — | CVE-2007-0239 |
| StarCalc Vulnerability CVE-2007-0238 | — | — | CVE-2007-0238 |
| WordPerfect Import Vulnerability CVE-2007-002 | — | — | CVE-2007-002 |
| WMF/EMF Processing Failures CVE-2006-5870 | — | — | CVE-2006-5870 |
| Potential vulnerability from 3rd party libxml2 libraries CVE-2006-4339 | — | — | CVE-2006-4339 |
| File Format CVE-2006-3117 | — | — | CVE-2006-3117 |
| Java Applets CVE-2006-2199 | — | — | CVE-2006-2199 |
| Macro CVE-2006-2198 | — | — | CVE-2006-2198 |