Description of the security update for Office Online Server: January 12, 2021

🗓️ 12 Jan 2021 08:00:00Reported by MicrosoftType

Security update for Office Online Server resolves remote code execution vulnerabilities. Fixes Insert Picture popup issue. Available via Microsoft Update, Update Catalog, and Download Center

Reporter	Title	Published	Views	Family All 96
BDU FSTEC	The vulnerability of Microsoft Excel, the Microsoft Office suite, Microsoft Office Online Server, Microsoft Office Web Apps Server, and Microsoft 365 Apps relates to the execution of arbitrary code when operations are performed outside of the buffer in memory. This vulnerability allows an attacker to execute arbitrary code.	26 Jan 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Excel, Microsoft Office products, Microsoft Office Online Server, Microsoft Office Web Apps, Microsoft SharePoint Enterprise Server, and Microsoft 365 Apps relates to insufficient input validation, allowing an attacker to execute arbitrary code.	8 Feb 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Word, Microsoft Office products, Microsoft Office Online Server, Microsoft Office Web Apps, Microsoft 365 Apps, Microsoft SharePoint Server, and Microsoft SharePoint Enterprise Server relates to writing outside the buffer, allowing an attacker to execute arbitrary code.	8 Feb 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Word, Microsoft Office products, Microsoft Office Online Server, Microsoft Office Web Apps, Microsoft 365 Apps, Microsoft SharePoint Server, and Microsoft SharePoint Enterprise Server arises from insufficient input data validation, allowing attackers to execute arbitrary code.	8 Feb 202100:00	–	bdu_fstec
Circl	CVE-2021-1715	12 Jan 202122:54	–	circl
Circl	CVE-2021-1716	12 Jan 202122:54	–	circl
CNNVD	Microsoft Excel Buffer Error Vulnerability	12 Jan 202100:00	–	cnnvd
CNNVD	Microsoft Word 安全漏洞	12 Jan 202100:00	–	cnnvd
CNNVD	Microsoft Excel Security Vulnerability	12 Jan 202100:00	–	cnnvd
CNNVD	Microsoft Word 缓冲区错误漏洞	12 Jan 202100:00	–	cnnvd

12 Jan 2021 08:00Current

8.4High risk

Vulners AI Score8.4

CVSS 29.3

CVSS 3.17.8

EPSS0.03614