CVE-2026-90627

Full vulnerability record from the local CVENow database.

Description

The flat file database driver in Apache Openoffice versions through 4.1.16 allows a crafted document to read the contents of any local file without asking the user. Users are recommended to upgrade to version 4.1.17, which fixes this issue.

Severity

Not scored

CVSS score

Not available

Vulnerability status

Received

Source identifier

[email protected]

Published

2026-11-04 11:17:19.227000

Last modified

2026-11-04 11:17:19.227000

View original CVE JSON

{
  "id": "CVE-2026-90627",
  "sourceIdentifier": "[email protected]",
  "published": "2026-11-04T11:17:19.227",
  "lastModified": "2026-11-04T11:17:19.227",
  "vulnStatus": "Received",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The flat file database driver in Apache Openoffice versions through 4.1.16 allows a crafted document to read the contents of any local file without asking the user.\nUsers are recommended to upgrade to version 4.1.17, which fixes this issue."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Apache Software Foundation",
          "product": "Apache OpenOffice",
          "defaultStatus": "unaffected",
          "packageURL": "pkg:software-id/apache.org/openoffice",
          "versions": [
            {
              "version": "0",
              "lessThanOrEqual": "4.1.16",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {},
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Primary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-552"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://lists.apache.org/thread.html/s7y9fspdysqojnr1z7ppltxtc48b4ljf",
      "source": "[email protected]"
    }
  ]
}