CVE-2026-59265
Qualys 위협 인텔 · 심각도 4/5 · QID 388898 · Local
쉬운 악용
대량 데이터 유출
패치 없음
A code execution issue in the Java integration in Apache OpenOffice v4.1.16 and earlier allows a crafted untrusted document to trigger executing arbitrary (even remote) code when opened by the user.
This issue is expected to be fixed in version 4.1.17, which is in the release candidate phase.
Until then, users can mitigate this issue by disabling Java runtime integration in the Preferences dialog. This prevents the attack. If this is not possible, or as an extra precaution, you can avoid opening open untrusted files entirely. Once 4.1.17 is released, upgrade to that version to fix the issue.
This issue is expected to be fixed in version 4.1.17, which is in the release candidate phase.
Until then, users can mitigate this issue by disabling Java runtime integration in the Preferences dialog. This prevents the attack. If this is not possible, or as an extra precaution, you can avoid opening open untrusted files entirely. Once 4.1.17 is released, upgrade to that version to fix the issue.
타임라인
- NVD 공개
- 첫 보도 The Hacker News · LibreOffice 및 OpenOffice의 취약점으로 인해 악성 스프레드시…
- 최근 보도 (총 3건) The Hacker News · ⚡ 주간 요약: 헬프데스크 제로데이, 위조 인증서, ShinyHunter…
날짜 정보 없는 신호: 공개 PoC 1건
공개 익스플로잇 / PoC
- GitHub 공개 PoC 1건 — 대표 레포 ↗