Dashboard / CVE-2026-90632

CVE-2026-90632

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2026-11-04 Modified: 2026-11-10 First seen: 2026-11-04 Status: active

Attack Surface

Low Complexity No Auth Conf. Impact

CVSS Vector Breakdown

AV: Local
AC: Low
PR: None
UI: Required
S: Unchanged
C: High
I: None
A: None

Description

Apache OpenOffice documents can include multimedia content (audio, video, etc.) A crafted document could exploit the GStreamer multimedia component of Apache OpenOffice version through 4.1.16 to load the contents of any local file, and include them when the document is saved or exported, for example as PDF. Users are recommended to upgrade to version 4.1.17, which fixes this issue.

Weakness Classification (1)

Affected Software (4)

VendorProductVersion
Apache Software Foundation Apache OpenOffice 0
Apache Software Foundation Apache OpenOffice 0
Apache Software Foundation Apache OpenOffice 0
apache openoffice < 4.1.17

References & Advisories (2)

Bug Bounty Relevance

36 / 100
✓ No authentication
✓ Low complexity

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

EPSS — Exploitation Probability

0.22%
Raw Score 0.002210
Percentile 12.8%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00221
2026-11-12
0.00221
2026-11-10
0.00221
2026-11-09
0.00221
2026-11-08
0.00221
2026-11-07
0.00221
2026-11-06
0.00221
2026-11-05
0.00221

Intelligence Sources

mitre ref →
nvd ref →

External Links