CVE-2026-90631
3.3 LOWPublished 2026-11-04 · Updated 2026-11-04
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt, possibly transferring the contents of environment variables in the process. This issue affects Apache OpenOffice: through 4.1.16. Users are recommended to upgrade to version 4.1.17, which fixes the issue.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Weaknesses
CWE-939
Vendors
apache
Products
openoffice
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- MEDIUMCVE-2026-113411PoC
- MEDIUMCVE-2026-118677PoC
- HIGHCVE-2026-53418
- MEDIUMCVE-2026-91900
- LOWCVE-2026-91901
- LOWCVE-2026-92862
- MEDIUMCVE-2026-96614
Related by shared AI tags and CWE weakness class. Browse the full archive.