Elastic APM Server can hand an authenticated APM agent the central agent configuration belonging to a different service - including sampling settings - because of a duplicate-identifier flaw (CWE-694) in how agent configuration requests are resolved. The mix-up lasts only until the cached configuration expires, so the result is timing-dependent rather than reliably attacker-controlled, and it only manifests where one APM Server provides central configuration to more than one service. Exploitation requires agent credentials (CVSS PR:L, network-reachable) and yields limited confidentiality impact; no public exploit has been identified at time of analysis, and Elastic has published fixed releases 8.19.24, 9.4.9 and 9.5.6.
Authenticated users with contributor-level access or above on WordPress sites running the Academy LMS plugin through version 4.0.1 can read the contents of arbitrary .html files from the server by supplying directory-traversal sequences in the 'id' parameter of a REST endpoint; the file contents are returned in full in the JSON response's content field. Impact is deliberately narrow: the plugin appends a '.html' extension to the attacker-supplied path before reading, so wp-config.php, PHP source, and any non-.html file cannot be reached. This is a moderate, not urgent, issue - no active exploitation is confirmed (not in CISA KEV) and no public exploit identified at time of analysis.
Tanium Discover contains improper access controls that let an authenticated user exceed intended permissions under high-complexity conditions, with limited confidentiality and integrity impact and no availability effect. Exploitation requires a valid account on Discover (PR:L) and conditions the attacker cannot fully control (AC:H), so real-world risk is reduced; this is a moderate-severity, low-priority issue rather than an urgent threat. No public exploit was identified at the time of analysis, and the vendor reference is Tanium advisory TAN-2026-085.
An authenticated user holding only low privileges on HPE Networking Fabric Composer can corrupt the configuration state of the managed system by exploiting a race condition in the product's API. The assessed vector is CVSS 3.1 4.2 (AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L): network reachability and a valid low-privileged session are required, the high attack complexity reflects a narrow timing-dependent window that cannot be triggered deterministically, and impact stops at partial integrity and availability loss with no confidentiality exposure. No public exploit has been identified at time of analysis and the issue is not in CISA KEV; vuln.today carries it as a this-month priority rather than an emergency.
Elasticsearch can leak field-level-security-protected information and return incomplete results to other users because cached query results are shared across users with different field-level security (FLS) restrictions for certain query types. Only authenticated users whose access is constrained by field-level security are able to exploit this (CVSS 4.2, AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N), and disclosure requires that a full-access user recently ran the identical query on the same shard so that its results are still cached; a restricted user can then infer which documents match a value in a field they cannot read, and can also cause full-access users to receive incomplete search results. Elastic has published a security update (ESA-2026-210) covering fixed releases in the 8.19, 9.4, 9.5 and 9.6 lines; no public exploit code or active exploitation is indicated in the available data, and the issue is assessed as low priority (vuln.today decision: this_month).
Improper output sanitization in Tanium Discover lets an authenticated, low-privileged user plant attacker-controlled content in a field that Discover later renders into exported output, with the effect only materializing when a second user opens that output in a downstream application that interprets formula elements (PR:L, UI:R, S:C). The assessed vector rates only a low availability impact with no confidentiality or integrity effect, so the confirmed worst case is not a direct data-disclosure or code-execution primitive against Discover itself. No public exploit code and no CISA KEV entry are associated with this CVE at time of analysis, and the vuln.today priority label places it in the this_month remediation bucket rather than an emergency one.
The pdfread and nuke plugins shipped with nnn through version 5.3 write to predictable, name- and PID-derived paths under ${TMPDIR:-/tmp}, letting another local user on the same host pre-create a symlink there so the victim's plugin run truncates and overwrites any file the victim can write. Exploitation requires an authenticated local account, write access to the temp directory, and the victim actively invoking the plugin (for the nuke listimages path the attacker must also predict the victim's PID), which confines realistic exposure to shared multi-user systems rather than single-user desktops. There is no remote vector and no public exploit code identified at time of analysis; an upstream commit fixing the plugin temp-file handling is available.
The weMail WordPress plugin through 2.1.6 does not correctly verify user capabilities in its REST API permission checks, treating any user whose role is in the weMail WordPress plugin through 2.1.6's allowed-roles list (Editor and above by default) as authorised for every action, which allows such users to perform administrator-level actions including enumerating all registered users with their email addresses and modifying the weMail WordPress plugin through 2.1.6's own access-control configuration.
The weMail WordPress plugin through 2.1.6 does not restrict a site-wide third-party email-service API key to administrators, exposing it in an admin screen that users with the Editor role can reach by default, which allows them to obtain a reusable credential usable without a WordPress session to impersonate other users and sever the site's email-service connection.
The WATI Chat and Notification WordPress plugin through 1.1.8 does not require a valid, non-empty secret on a public endpoint that returns its stored API token, which an unauthenticated attacker can then present to a second public endpoint to obtain the order-received URL of any WooCommerce order and read the customer's name, address, phone number and email address. The endpoints are reachable in the WATI Chat and Notification WordPress plugin through 1.1.8's default state and are closed only once a WATI account is connected.
The Gallery for Social Photo WordPress plugin through 1.0.0.41 does not validate a user-supplied URL before using it to perform a server-side request, allowing unauthenticated attackers to make the server issue requests to arbitrary internal hosts and read the responses.
The DT LMS WordPress plugin through 1.2 does not perform capability or nonce checks on one of its AJAX actions, allowing unauthenticated attackers to revoke any learner's course and class completion status.
The DT Directory Lite Addon WordPress plugin through 1.1 does not perform nonce or capability checks on its settings handlers, allowing unauthenticated attackers to modify the DT Directory Lite Addon WordPress plugin through 1.1's configuration and skin options.
The AZEXO Store Locator WordPress plugin through 1.4 does not have a capability check or any authorization control when deleting a post, allowing any authenticated user, such as a subscriber, to delete arbitrary posts and pages.
A low-severity local denial-of-service issue in HPE Networking Fabric Composer lets a user who already holds low-privileged access on the host degrade availability for other workloads sharing that host, with a CVSS 3.1 score of 3.8 (AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L). There is no remote vector and no confidentiality or integrity impact; the trigger mechanism itself is not described in the available sources. No public exploit code or confirmed active exploitation was identified at time of analysis, and the single reference is HPE's own support advisory, so priority is monitor.
Low-severity information disclosure in HPE Networking Fabric Composer allows remote, unauthenticated attackers to obtain sensitive information from the affected system, but only under conditions that include a high attack complexity per CVSS (AC:H), meaning exploitation depends on circumstances outside the attacker's direct control. Impact is limited to confidentiality (C:L) with no integrity or availability effect, yielding a CVSS 3.1 score of 3.7. No public exploit code and no confirmed active exploitation (CISA KEV) were identified at time of analysis, and the vuln.today decision framework rates this 'monitor', so it is not an urgent priority.
Out-of-bounds stack read in NTPsec's NTS-KE client response parser (nts_client_process_response_core) affects versions before 1.2.4 and lets a malicious NTS-KE server leak client stack memory - including pointers useful for defeating ASLR - which the client then transmits in cleartext as NTS cookies. Per the authoritative assessment, exploitation requires the NTPsec client to connect to an attacker-controlled NTS-KE server, either by configuration or by impersonating a legitimate server with a TLS certificate the client trusts, and NTS-KE's TLS layer blocks passive or certificate-less MITM attempts; impact is limited to low confidentiality with no code execution. No public exploit code is confirmed in the available data and the issue is not in CISA KEV, with the priority decision scored as monitor.
Script injection in Dell Wyse Management Suite (versions prior to 2609.0.0.155) lets an attacker who already holds a low-privileged local account inject script through unneutralized web-page input, with only a limited confidentiality impact and no integrity or availability effect recorded by the CVSS vector (AV:L/PR:L/UI:N/C:L/I:N/A:N). Exposure is narrow: the vector requires local access plus an existing low-privileged account, so a remote unauthenticated attacker cannot reach the flaw and no public exploit code or CISA KEV entry is associated with it. Priority rating is monitor, and this is a low-priority issue rather than an emergency, with internally consistent rather than conflicting signals.
HPE Networking Fabric Composer exposes a local information disclosure weakness in its underlying operating system that lets a low-privileged local user read certain files. Only parties who already hold an authenticated local account on the appliance OS are positioned to abuse it, and the impact is limited to confidentiality with no integrity or availability effect, giving a CVSS score of 3.3. No public exploit code or confirmed active exploitation has been identified at time of analysis, and the priority is monitor.
Improper access controls in Tanium Discover allow an authenticated low-privilege user to disclose limited confidential information over the network, with no integrity or availability impact. The issue carries a low CVSS 3.1 base score and the available signals support a monitor priority; no public exploit has been identified at time of analysis. Tanium's TAN-2026-091 advisory is the vendor reference for the addressed flaw.
Sensitive information disclosure in HPE Networking Fabric Composer's management interface allows a low-privileged authenticated user to retrieve certain data stored on the affected system, with impact limited to confidentiality. The assessed CVSS 3.1 vector (AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) indicates a remote but high-complexity path requiring an existing low-privilege session; no KEV entry or public exploit confirmation was provided, and no public exploit was identified at time of analysis. The exact endpoint and trigger are not described in the available sources, so the HPE advisory is the primary reference for affected versions and fixes.
The API of HPE Networking Fabric Composer is affected by an authenticated path traversal flaw that lets a low-privileged account read files from the underlying operating system, with confidentiality as the only impacted property. Exploitation is not straightforward: beyond holding valid low-privileged credentials (PR:L, network-reachable), an attacker must satisfy preconditions the vendor describes as outside their control, which is what drives the High attack complexity rating and the overall CVSS score of 3.1. No KEV entry, no public exploit code was identified at time of analysis, and the priority assessment is monitor, so this is a low-urgency exposure that matters mainly to organizations running Fabric Composer with broadly distributed low-privilege API accounts.
Information disclosure in Dell's OS Recovery Tool (versions prior to 2.4.4) stems from a hard-coded cryptographic key embedded in the application (CWE-321), which an attacker who can extract it may use to recover data the key was intended to protect. Exploitation is gated by the CVSS vector's physical-access requirement (AV:P); no authentication (PR:N) or user interaction (UI:N) is needed once an attacker is at the machine, and impact is confined to partial confidentiality loss (C:L) with no integrity or availability effect, giving a low 2.4 base score and a 'monitor' priority. No public exploit code was identified at time of analysis, and installations on 2.4.4 or later are not affected.
NoSQL injection in the MongoDB Entity Framework Core provider allows an authenticated, low-privileged attacker to cause unintended modification of fields in records the application is already bulk-updating, and in some cases to relocate values already held in a record into other fields of that same record. Exposure is limited to applications that place caller-supplied values into a bulk update expressed as a database expression without neutralizing them; simply using the provider is not sufficient, and the assessed impact is Low confidentiality and integrity with no availability effect. No public exploit code has been identified at time of analysis, the priority label is monitor, and the only reference currently available is the vendor Jira advisory EF-478.
Lightdash 0.2609.0 through 3.136.x contains a cross-project insecure direct object reference in RenameService that lets an authenticated user holding update permission on any single project tamper with dashboards in projects they cannot access. By pairing a projectUuid they control in the URL with a foreign dashboardUuid, an attacker can persist rewritten filters on another team's dashboard (breaking its charts for every viewer) or read that project's field metadata through the /rename/dashboard/fields endpoint. Exploitation requires a valid credential such as a Personal Access Token and prior knowledge of a non-enumerable foreign dashboard UUID, which is why the vendor's advisory and this analysis both treat it as a low-priority, monitor-level issue rather than an emergency; no confirmed public exploit code or KEV entry exists, though the vendor advisory publishes a proof-of-concept walkthrough.
Django's server-side per-page caching layer (UpdateCacheMiddleware and the cache_page() decorator) can generate identical cache keys for two requests that should be cached separately: one that omits a request header named in the response's Vary header, and one that sends that header with an empty value. Because a missing header was substituted with an empty string during key generation, a response cached for one of those requests may be served to the other, potentially disclosing private or per-request data to a different client. Exposure requires that the application has opted into Django's caching middleware or decorator and caches responses that vary on a header clients can omit or blank; the vendor rates the issue low severity, no public exploit has been identified at time of analysis, and fixes are available in Django 6.1.3, 6.0.10, and 5.2.19.
AuditPilot's knowledge-retrieval endpoints let an authenticated user who holds read:knowledge on a single project read knowledge chunks belonging to other projects in the same tenant by supplying a foreign context.project_id to GET /api/knowledge/query or POST /api/research/answer. Builds of the intelligent-audit-system repository prior to commit 4669c93f3a7403a0e242bef14d771beef0b4356b are affected; the exposure is confidentiality-only and stays inside one tenant, and the attacker must know or guess a valid in-tenant project identifier before the bypass returns anything. No public exploit code and no CISA KEV entry were identified at time of analysis, and the low severity score is consistent with the monitor priority label assigned to this CVE.
Parse Server's POST /upgradeToRevocableSession endpoint will mint a fresh session for any valid session token - including one that is already revocable - because it does not enforce the create class-level permission on the _Session class, so a holder of a user's session token can obtain extra sessions with new expiration dates that remain valid after the original session is logged out. The attacker gains no new privileges or data, only persistence for an account they can already access, and only deployments that restrict the _Session create CLP are affected, per the advisory. Vendor fixes are released in 8.6.112 and 9.10.6-alpha.4; no public exploit code was identified at time of analysis and the issue is not listed in CISA KEV.
FreeRDP X11 clients through 3.32.1 can be terminated by a malicious or compromised RDP server that supplies oversized target dimensions or output origin in an RDPGFX MAPSURFACETOSCALEDOUTPUT PDU, because the values are stored verbatim and later reach a checked UINT16 cast or a destination-stride assertion. Impact is availability-only client abort (no confidentiality or integrity effect) and the assessed vector is AV:N/AC:H/PR:N/UI:R with the victim required to initiate a connection to the attacker's server; two documented trigger paths depend on specific build, assert and X visual configurations rather than a stock default build. No active exploitation is confirmed (not in CISA KEV), the priority label is monitor, and a public PoC reference in the vendor advisory is a focused harness rather than verified working exploit code.
FreeRDP clients built with active WinPR assertions can be aborted by a malicious or attacker-controlled RDP server that sends a malformed RDPDR device-list announcement declaring a DeviceDataLength larger than the bytes actually delivered. The crash requires a narrow combination of conditions: device redirection must be enabled so the RDPDR channel is active, the RDPDR logger must be at TRACE level so the diagnostic packet dumper runs, and the client build must carry active WinPR assertions - with INFO logging or assertions disabled the same packet left the client running. Affected releases are 3.27.0 through 3.32.1 (fixed in 3.32.2), the demonstrated impact is availability only - no memory corruption, data disclosure, modification, or code execution - and the vendor advisory publishes a working relay script that reproduced the abort end to end, though there is no indication of active exploitation in the field.
Stored cross-site scripting in Bagisto's RMA conversation attachments (all versions before 2.4.5) allows any authenticated customer to upload an .html file that is stored under /storage/rma-conversation/ and executes JavaScript in the shop's own origin when a store administrator opens it in a browser. The issue is scored only 2.1 under CVSS 4.0 (independent assessment: CVSS 3.1 AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) because exploitation requires a valid customer account, an active RMA return-request workflow, and an administrator who deliberately opens the attachment, confining impact to that administrator's browser session rather than the server. No public exploit code or CISA KEV entry was identified at time of analysis, and the vuln.today decision label is monitor.
School-scoped administrators in RosarioSIS before 12.9 can write fees and payments against students enrolled at other schools, breaking the per-school isolation the application otherwise enforces on billing data. The flaw is an IDOR (CWE-639): MassAssignFees.php and MassAssignPayments.php iterate the student[] POST array on a modfunc=save request without verifying that each supplied student ID belongs to a school inside the administrator's own SCHOOLS scope. Exploitation requires an authenticated, highly privileged school-admin session (PR:H), the impact is integrity-only on billing balances with no read disclosure or availability effect, no public exploit code has been identified at time of analysis, and the vendor fix ships in 12.9; the priority signal is 'monitor'.
Out-of-bounds writes in the MongoDB Atlas SQL ODBC Driver can place query result values outside the buffer the calling application supplied, corrupting client-side memory or terminating the client process. Exposure requires two conditions to hold at once: a party must be able to influence the values a query returns, and the client application must use a specific application-chosen pattern of requesting several result rows at once (bulk/array row retrieval), so applications that fetch rows one at a time are not affected. Impact is limited to the client application's memory - no confidentiality loss, only limited integrity modification or process termination - and no public exploit has been identified at time of analysis; the CDC (vuln.today) decision label is monitor and the assessed severity is low despite the network-reachable vector.
mongorestore in MongoDB Database Tools can redirect restored documents into a different collection when a truncated dump filename causes the tool to URL-decode the original collection name from metadata, with colliding names potentially omitting backed-up documents or, when --drop is used, replacing the unintended destination. The issue affects versions 100.0.2 through before 100.20.1 and requires an authenticated low-privileged database user who can create a crafted collection plus a later operator-initiated directory restore with write access to the destination. The vendor released 100.20.1 as the fix; no public exploit identified at time of analysis.
Password-hash disclosure in the Django admin affects custom user-model deployments: staff users who hold only the 'view' permission on a user model can read the entire stored password hash from the read-only change form when that model is not the configured AUTH_USER_MODEL, or when AUTH_USER_MODEL inherits its `password` field from a concrete parent through multi-table inheritance. The flaw is in `django.contrib.admin.utils.display_for_field()`, which only masked the password field when the field's model was exactly `get_user_model()`; the fix broadens that check to any `AbstractBaseUser` subclass and to models that are ancestors of the configured user model. Supported branches 6.1 before 6.1.3 and 6.0 before 6.0.10 are affected, and Django rates the issue severity "low"; there is no CISA KEV listing and no public exploit identified at time of analysis, and the operator decision label is monitor. Exposure requires an attacker who already holds valid staff credentials and admin access (PR:H per the assessed vector), and what is disclosed is a hash rather than plaintext, so offline cracking is still needed to make the information useful.
Heap buffer over-read in the HDF5 library through 2.2.0 lets a crafted HDF5 file push an object-header message body past the end of its decoded chunk, so opening the file through H5Fopen() can terminate the process or disclose a small amount of process memory through a decode callback such as H5O__mtime_new_decode(). The flaw is in H5O__chunk_deserialize(), which validates the declared message size before the remainder of the message header (flags and, for version 2 object headers, the optional creation index) has been consumed, leaving up to four bytes of unchecked slack. Impact is bounded by the assessed CVSS:3.1 vector AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L - exploitation is local and requires a victim to open a malicious file, with only low confidentiality and availability consequences and no integrity or code-execution impact; there is no CISA KEV entry, the CVSS 4.0 vector carries an exploit-maturity value of proof-of-concept only, and the priority decision is monitor. The vendor fix is an upstream pull request (HDFGroup/hdf5#6589) that closes issue #6401.
HDF5 through 2.2.0 discloses process heap memory when an application opens and reads a dataset that uses the scaleoffset filter from a crafted file whose filtered chunk record is truncated. The decode path in H5Z__filter_scaleoffset() validates reads against the allocated size of the chunk buffer instead of the number of bytes actually stored, and because H5D__chunk_lock() sizes that buffer to the larger of the stored and unfiltered chunk sizes while filling only the stored bytes, the truncated chunk passes the bounds check and the uninitialized remainder is decompressed and returned as dataset data. The vulnerability is local (CVSS:3.1/AV:L/AC:L/PR:N/UI:R), requires the victim to open and read the crafted file, and is limited to confidentiality impact with no code execution, modification, or crash; an upstream fix exists in PR 6585 but no released patched version is confirmed, and no public exploit has been identified.
Docker Buildx releases v0.19.0 through v0.38.0 can bypass the fs.read entitlement check when a user runs an untrusted Bake definition, allowing a crafted path to read files that are accessible to the Buildx client without the expected approval prompt. The bypass is narrow: the target path must sit under the same parent directory as the current working directory, must use the working directory's basename as a prefix, and a file with a specifically matching filename has to exist next to the project directory, so the attacker cannot select arbitrary files. Only confidentiality is affected and only at Low severity (no write or code execution), and users who build exclusively from trusted Bake definitions are not exposed; the flaw is fixed in v0.38.1, and no public exploit code was identified in the available sources at time of analysis.
Silent message loss in whatstk 0.3.0 through 0.8.x lets a party who supplies one of the chat exports cause messages to vanish from the output of merge_chats() (reached through BaseChat.merge()) without any warning or count of what was removed. The merge keeps whole the chat whose first message is oldest and appends from the other export only messages strictly newer than that chat's last message, so every message of the second export that falls inside the already-covered date range is discarded; a message held by only one export is dropped whenever its date sits inside the range of the other. Exploitation requires the victim to run a merge over attacker-influenced input (local, active user interaction, no privileges needed), there is no code execution or confidentiality impact, the assessed severity is low (CVSS 1.8), no public exploit has been identified at time of analysis, and the vendor has released a fix in 0.9.0.
MongoDB Database Tools' mongofiles utility in versions 100.2.0 through before 100.20.1 can be induced to create a file outside the operator's download working directory when get_regex retrieves a GridFS object after an attacker plants a symlink in that directory. Exploitation requires low-privilege GridFS upload access, local write access to the operator's working directory, and the operator later running the matching retrieval; the demonstrated default behavior creates a new file rather than overwriting one. Impact is limited integrity loss under the operator's filesystem permissions, and no public exploit has been identified at time of analysis.
Local file-write redirection and path disclosure in the nnn terminal file manager (through version 5.3) affect users who enable the NNN_FIFO preview/FIFO channel. An attacker holding an unprivileged local account and write access to /tmp can pre-create the documented, predictable /tmp/nnn.fifo path as a symlink or an attacker-readable regular file before the victim starts nnn, so that writes nnn makes to that path overwrite files the victim can already write to or expose the victim's browsed paths; exploitation requires the FIFO feature to be in use and depends on the victim launching nnn. No public exploit code or confirmed active exploitation was identified at time of analysis, and the assessed severity is low (CVSS 4.0 base 1.0; our CVSS 3.1 assessment AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N; vuln.today priority label: monitor).
Terminal escape sequence injection in Canop dysk before 3.8.2 allows a local low-privileged user who can create FUSE mounts to place ESC/OSC sequences in mount-point names or fsname, which dysk then renders unsanitized in its table and CSV output; when another user runs dysk in an interpreting terminal, output can be spoofed or hidden and window titles changed. The issue is local-only with victim interaction, integrity impact only, no code execution or data disclosure, and no public exploit identified at time of analysis (priority: monitor).
An out-of-bounds memory write in the PDF import code of Apache OpenOffice allows a crafted PDF to crash the application or corrupt memory when a user opens or imports the file. All releases through 4.1.16 are affected; the vendor shipped OpenOffice 4.1.17 on 2026-10-14 to correct the flaw. Exploitation requires the victim to open a malicious encrypted PDF (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H per independent assessment), so there is no network-reachable attack path: no public exploit code was identified at time of analysis and there is no CISA KEV listing or EPSS data, leaving the item unscored and marked 'awaiting_data' by vuln.today.
Local file disclosure in Apache OpenOffice through 4.1.16 occurs when a crafted document embedding multimedia is processed by the GStreamer component and the victim saves or exports that document, such as to PDF, causing contents of a local file to be read and embedded. The victim must open the document and then save or export it, and the attacker must obtain the resulting output to access the data; no privileges are required (PR:N) but user interaction is required (UI:R), and the vendor recommends upgrading to 4.1.17. The vendor record carries no CVSS, EPSS, KEV, or SSVC data, although the independent assessment supplies an assessed CVSS vector; the vuln.today decision label is awaiting_data and no public exploit identified at time of analysis, so the absence of quantitative signals is an intelligence gap rather than evidence of low risk.
Apache OpenOffice through 4.1.16 automatically loads external links embedded in a crafted document without prompting the user, allowing an attacker to cause outbound requests that can carry environment-variable contents accessible to the application process. The issue is client-side and requires a victim to open a malicious document; the independent assessment limits impact to confidentiality with no integrity or availability effect. No public exploit identified at time of analysis, no CISA KEV entry is provided, and the vuln.today decision label is awaiting_data.
Opening a crafted WMF (Windows Metafile) image in Apache OpenOffice 4.1.16 or earlier can drive the WMF import filter into an out-of-bounds memory access, crashing the application or corrupting memory. The independently assessed CVSS v3.1 vector is AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H, reflecting low confidentiality and integrity impact with high availability impact, and the assessed exploitation condition is that the victim must open or process an attacker-supplied WMF, either standalone or embedded in a document. The issue is fixed in Apache OpenOffice 4.1.17, announced 2026-10-14; no CISA KEV entry, no confirmed public exploit code, and no EPSS score were supplied, and the vuln.today priority is 'awaiting_data', so exploitation likelihood cannot be quantified from the available intelligence.
Memory corruption in Apache OpenOffice through 4.1.16 can be triggered when a user opens a document containing a crafted CFF font and then invokes PDF export, potentially causing a crash, memory corruption, or code execution. The flaw is an uncontrolled memory access in CFF hint handling that manifests as a stack overflow in the PDF export code path. Version 4.1.17 fixes the issue; no public exploit was identified at time of analysis, and no KEV listing or EPSS score is present in the supplied data.
Local file disclosure in Apache OpenOffice through 4.1.16 lets a crafted document cause the flat-file database driver to read any local file the user can access without a consent prompt. Exploitation requires the victim to open the malicious document; the assessed vector is CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N. No public exploit code was identified at time of analysis, and the vendor has released 4.1.17 as the fix.
Apache OpenOffice through 4.1.16 contains an uncontrolled memory access in its PDF import code that lets a crafted, encrypted PDF file trigger an out-of-bounds memory write, crashing the application or corrupting memory. Exploitation requires the victim to import the malicious PDF into a vulnerable build, so user interaction is mandatory and there is no network-facing service involved; the vendor advisory establishes only crash and memory corruption, not reliable code execution. Apache OpenOffice 4.1.17 fixes the issue; no public exploit code, EPSS score, or CISA KEV entry was identified in the available data at time of analysis.
A heap-based out-of-bounds memory write in the PDF import code of Apache OpenOffice through 4.1.16 lets a crafted PDF file corrupt memory and potentially achieve code execution in the context of the user who opens it. Exploitation requires the victim to open or import a malicious PDF through the suite's standard PDF import path, so the attacker cannot trigger it without that user interaction; no authentication is involved and no non-default configuration is needed. No public exploit code, EPSS score, or KEV entry is present in the available data, and the vuln.today decision label is 'awaiting_data', so quantitative exploitation signals are absent; the vendor rates the issue important and has released 4.1.17 as the fix.