CVE-2025-64403
High · 8.1CVSS
8.1
EPSS
1.3%
Published
Nov 12, 2025
CISA due date
—
The record
Apache OpenOffice Calc spreadsheet can contain links to other files, in the form of "external data sources". A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause such links to be loaded without prompt. This issue affects Apache OpenOffice: through 4.1.15. Users are recommended to upgrade to version 4.1.16, which fixes the issue.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|