{"generated_at":"2026-11-13T17:03:04.473Z","stack":{"id":"office-suites","label":"Office suites","group":"Devices & apps","products":["Apache OpenOffice"]},"status":{"level":"partial","label":"Partial outage","live":6,"critical":0,"open":6},"grade":{"letter":"B","line":"3 high or critical to check"},"temp":{"temp_c":57,"label":"57°C","name":"Iced. Chilling."},"links":{"page":"https://pwned.coffee/menu/office-suites","json":"https://pwned.coffee/menu/office-suites.json","llms":"https://pwned.coffee/menu/office-suites/llms.txt","rss":"https://pwned.coffee/feed.xml?stack=office-suites","changes":"https://pwned.coffee/changes.json?stack=office-suites","grade":"https://pwned.coffee/grade/office-suites","badge":"https://pwned.coffee/badge/office-suites.svg"},"count":6,"incidents":[{"id":"apache-openoffice-out-of-bounds-memory-access-cve-2026-90629","url":"https://pwned.coffee/i/apache-openoffice-out-of-bounds-memory-access-cve-2026-90629","title":"Apache OpenOffice: out-of-bounds memory access","summary":"Apache OpenOffice has an out-of-bounds memory access vulnerability during WMF import, allowing program crash or memory corruption.","severity":"high","brew":{"name":"Americano","temp":"183°C"},"patch_status":"unknown","bucket":"unknown","kitchen":{"name":"On hold","plain":"Status unknown"},"order_reason":"the rest, by urgency","status":"live","exploited":false,"exploitation":"none_known","exploitation_label":"No known exploitation","public_poc":false,"receipt":[{"kind":"score","quote":"CVSS 3.1 7.3 (CISA ADP) for CVE-2026-90629","url":"https://www.cve.org/CVERecord?id=CVE-2026-90629"}],"kev_due":null,"kev_forensic_triage":null,"kev_cwes":[],"do":"Check the Apache OpenOffice advisory for a fix and avoid importing WMF files from untrusted sources meanwhile.","affected":"Apache OpenOffice","fixed_versions":[],"fix_lines":[],"downstream":[],"fix_note":null,"not_affected_products":[],"vendor_notes":[],"related":[],"cvss":7.3,"severity_source":{"label":"CVSS 3.1 7.3 (CISA ADP) for CVE-2026-90629","url":"https://www.cve.org/CVERecord?id=CVE-2026-90629"},"spreading_until":null,"still_cooking":[],"published":"2026-11-04T11:04:07.403Z","checked_at":"2026-11-13T16:26:18.394Z","unverified_ids":[],"ids":["CVE-2026-90629"],"aliases":[],"stack":["office-suites"],"first_seen":"2026-11-03T21:57:13.000Z","listed_at":"2026-11-03T22:18:42.188Z","updated_at":"2026-11-04T23:18:03.646Z"},{"id":"apache-openoffice-out-of-bounds-write-cve-2026-90626","url":"https://pwned.coffee/i/apache-openoffice-out-of-bounds-write-cve-2026-90626","title":"Apache OpenOffice: out-of-bounds write","summary":"Apache OpenOffice has an out-of-bounds write vulnerability when importing encrypted PDF files, allowing program crash or memory corruption.","severity":"high","brew":{"name":"Americano","temp":"183°C"},"patch_status":"unknown","bucket":"unknown","kitchen":{"name":"On hold","plain":"Status unknown"},"order_reason":"the rest, by urgency","status":"live","exploited":false,"exploitation":"none_known","exploitation_label":"No known exploitation","public_poc":false,"receipt":[{"kind":"score","quote":"CVSS 3.1 7.3 (CISA ADP) for CVE-2026-90626","url":"https://www.cve.org/CVERecord?id=CVE-2026-90626"}],"kev_due":null,"kev_forensic_triage":null,"kev_cwes":[],"do":"Check the Apache OpenOffice advisory for a fix and avoid opening encrypted PDF files meanwhile.","affected":"Apache OpenOffice","fixed_versions":[],"fix_lines":[],"downstream":[],"fix_note":null,"not_affected_products":[],"vendor_notes":[],"related":[],"cvss":7.3,"severity_source":{"label":"CVSS 3.1 7.3 (CISA ADP) for CVE-2026-90626","url":"https://www.cve.org/CVERecord?id=CVE-2026-90626"},"spreading_until":null,"still_cooking":[],"published":"2026-11-04T11:04:38.055Z","checked_at":"2026-11-13T16:26:18.394Z","unverified_ids":[],"ids":["CVE-2026-90626","CVE-2026-90634"],"aliases":[],"stack":["office-suites"],"first_seen":"2026-11-03T21:51:24.000Z","listed_at":"2026-11-03T22:18:40.143Z","updated_at":"2026-11-04T23:18:03.646Z"},{"id":"apache-openoffice-stack-overflow-cve-2026-90628","url":"https://pwned.coffee/i/apache-openoffice-stack-overflow-cve-2026-90628","title":"Apache OpenOffice: stack overflow","summary":"Apache OpenOffice has a stack overflow vulnerability in CFF hint handling, allowing program crash or memory corruption.","severity":"high","brew":{"name":"Americano","temp":"183°C"},"patch_status":"unknown","bucket":"unknown","kitchen":{"name":"On hold","plain":"Status unknown"},"order_reason":"the rest, by urgency","status":"live","exploited":false,"exploitation":"none_known","exploitation_label":"No known exploitation","public_poc":false,"receipt":[{"kind":"score","quote":"CVSS 3.1 7.3 (CISA ADP) for CVE-2026-90628","url":"https://www.cve.org/CVERecord?id=CVE-2026-90628"}],"kev_due":null,"kev_forensic_triage":null,"kev_cwes":[],"do":"Check the Apache OpenOffice advisory for a fix and avoid opening untrusted documents with CFF fonts meanwhile.","affected":"Apache OpenOffice","fixed_versions":[],"fix_lines":[],"downstream":[],"fix_note":null,"not_affected_products":[],"vendor_notes":[],"related":[],"cvss":7.3,"severity_source":{"label":"CVSS 3.1 7.3 (CISA ADP) for CVE-2026-90628","url":"https://www.cve.org/CVERecord?id=CVE-2026-90628"},"spreading_until":null,"still_cooking":[],"published":"2026-11-04T11:03:41.225Z","checked_at":"2026-11-13T16:26:18.394Z","unverified_ids":[],"ids":["CVE-2026-90628"],"aliases":[],"stack":["office-suites"],"first_seen":"2026-11-03T21:55:11.000Z","listed_at":"2026-11-03T22:18:41.415Z","updated_at":"2026-11-04T23:18:03.646Z"},{"id":"apache-openoffice-local-file-inclusion-cve-2026-90627","url":"https://pwned.coffee/i/apache-openoffice-local-file-inclusion-cve-2026-90627","title":"Apache OpenOffice: local file inclusion","summary":"Apache OpenOffice has a local file inclusion vulnerability via SQL provider and flat file database references, allowing attackers to read local files.","severity":"medium","brew":{"name":"Decaf","temp":"70°C"},"patch_status":"unknown","bucket":"unknown","kitchen":{"name":"On hold","plain":"Status unknown"},"order_reason":"the rest, by urgency","status":"live","exploited":false,"exploitation":"none_known","exploitation_label":"No known exploitation","public_poc":false,"receipt":[{"kind":"score","quote":"CVSS 3.1 5.5 (CISA ADP) for CVE-2026-90627","url":"https://www.cve.org/CVERecord?id=CVE-2026-90627"}],"kev_due":null,"kev_forensic_triage":null,"kev_cwes":[],"do":"Check the Apache OpenOffice advisory for a fix and avoid opening untrusted database files meanwhile.","affected":"Apache OpenOffice","fixed_versions":[],"fix_lines":[{"product":"Apache OpenOffice","range":"<= 4.1.16","note":"fix not named in the CVE record: see vendor advisory","state":"unknown","unknown_reason":"cna_affected_only","source":"cna","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-90627","verified_at":"2026-11-04T23:18:03.646Z","quote":"Apache OpenOffice 0 through 4.1.16 affected"}],"downstream":[],"fix_note":null,"not_affected_products":[],"vendor_notes":[],"related":[],"cvss":5.5,"severity_source":{"label":"CVSS 3.1 5.5 (CISA ADP) for CVE-2026-90627","url":"https://www.cve.org/CVERecord?id=CVE-2026-90627"},"spreading_until":null,"still_cooking":[],"published":"2026-11-04T11:03:29.974Z","checked_at":"2026-11-13T16:26:18.394Z","unverified_ids":[],"ids":["CVE-2026-90627"],"aliases":[],"stack":["office-suites"],"first_seen":"2026-11-03T21:53:20.000Z","listed_at":"2026-11-03T22:18:40.782Z","updated_at":"2026-11-04T23:18:03.646Z"},{"id":"apache-openoffice-local-file-inclusion-via-gstreamer-cve-2026-90632","url":"https://pwned.coffee/i/apache-openoffice-local-file-inclusion-via-gstreamer-cve-2026-90632","title":"Apache OpenOffice: local file inclusion via GStreamer","summary":"Apache OpenOffice has a local file inclusion vulnerability via GStreamer plugin, allowing attackers to load local files.","severity":"medium","brew":{"name":"Decaf","temp":"70°C"},"patch_status":"unknown","bucket":"unknown","kitchen":{"name":"On hold","plain":"Status unknown"},"order_reason":"the rest, by urgency","status":"live","exploited":false,"exploitation":"none_known","exploitation_label":"No known exploitation","public_poc":false,"receipt":[{"kind":"score","quote":"CVSS 3.1 5.5 (NVD) for CVE-2026-90632","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90632"}],"kev_due":null,"kev_forensic_triage":null,"kev_cwes":[],"do":"Check the Apache OpenOffice advisory for a fix and restrict who can open untrusted documents meanwhile.","affected":"Apache OpenOffice","fixed_versions":[],"fix_lines":[],"downstream":[],"fix_note":null,"not_affected_products":[],"vendor_notes":[],"related":[],"cvss":5.5,"severity_source":{"label":"CVSS 3.1 5.5 (NVD) for CVE-2026-90632","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90632"},"spreading_until":null,"still_cooking":[],"published":"2026-11-04T11:05:00.779Z","checked_at":"2026-11-13T16:26:18.394Z","unverified_ids":[],"ids":["CVE-2026-90632"],"aliases":[],"stack":["office-suites"],"first_seen":"2026-11-03T22:00:59.000Z","listed_at":"2026-11-03T22:18:43.472Z","updated_at":"2026-11-04T23:18:03.646Z"},{"id":"apache-openoffice-remote-document-loading-cve-2026-90631","url":"https://pwned.coffee/i/apache-openoffice-remote-document-loading-cve-2026-90631","title":"Apache OpenOffice: remote document loading","summary":"Apache OpenOffice has a vulnerability allowing remote documents to be loaded without prompt, possibly leaking environment variables.","severity":"low","brew":{"name":"Decaf","temp":"70°C"},"patch_status":"unknown","bucket":"unknown","kitchen":{"name":"On hold","plain":"Status unknown"},"order_reason":"the rest, by urgency","status":"live","exploited":false,"exploitation":"none_known","exploitation_label":"No known exploitation","public_poc":false,"receipt":[{"kind":"score","quote":"CVSS 3.1 3.3 (CISA ADP) for CVE-2026-90631","url":"https://www.cve.org/CVERecord?id=CVE-2026-90631"}],"kev_due":null,"kev_forensic_triage":null,"kev_cwes":[],"do":"Check the Apache OpenOffice advisory for a fix and block loading remote documents from untrusted sources meanwhile.","affected":"Apache OpenOffice","fixed_versions":[],"fix_lines":[],"downstream":[],"fix_note":null,"not_affected_products":[],"vendor_notes":[],"related":[],"cvss":3.3,"severity_source":{"label":"CVSS 3.1 3.3 (CISA ADP) for CVE-2026-90631","url":"https://www.cve.org/CVERecord?id=CVE-2026-90631"},"spreading_until":null,"still_cooking":[],"published":"2026-11-04T11:04:29.104Z","checked_at":"2026-11-13T16:26:18.394Z","unverified_ids":[],"ids":["CVE-2026-90631"],"aliases":[],"stack":["office-suites"],"first_seen":"2026-11-03T21:59:04.000Z","listed_at":"2026-11-03T22:18:42.835Z","updated_at":"2026-11-04T23:18:03.646Z"}],"recently_past":[]}