305 matches found
Security Updates for Microsoft Office Online Server (September 2025)
The Microsoft Office Online Server installation on the remote host is missing security updates. It is, therefore, affected by multiple remote code execution vulnerabilities. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. %NASLMINLEVEL 80900 C...
Description of the security update for Office Online Server: September 09, 2025 (KB5002776)
None None...
Description of the security update for Office Online Server: August 12, 2025 (KB5002752)
None None...
Security Updates for Microsoft Office Online Server (August 2025)
The Microsoft Office Online Server installation on the remote host is missing security updates. It is, therefore, affected by multiple remote code execution vulnerabilities. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. %NASLMINLEVEL 80900 C...
Vulnerability of Microsoft Excel, Microsoft Office, Microsoft 365 Apps for Enterprise, and Microsoft Office Online Server packages, which allows a perpetrator to execute arbitrary code.
The vulnerability of Microsoft Excel, Microsoft Office, Microsoft 365 Apps for Enterprise, and Microsoft Office Online Server programs is related to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Security Updates for Microsoft Office Online Server (July 2025)
The Microsoft Office Online Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2025-48812 - A remote...
Description of the security update for Office Online Server: July 8, 2025 (KB5002740)
None None...
Vulnerability of Microsoft Excel, Microsoft Office, Microsoft 365 Apps for Enterprise, and Microsoft Office Online Server programs, related to the use of memory after it is released, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Excel, Microsoft Office, Microsoft 365 Apps for Enterprise, and Microsoft Office Online Server programs is related to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Description of the security update for Office Online Server: June 10, 2025 (KB5002728)
None None...
Security Updates for Microsoft Office Online Server (June 2025)
The Microsoft Office Online Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...
CVE-2020-0695
A spoofing vulnerability exists when Office Online Server does not validate origin in cross-origin communications correctly, aka 'Microsoft Office Online Server Spoofing Vulnerability'...
Description of the security update for Office Online Server: May 13, 2025 (KB5002707)
None None...
Security Updates for Microsoft Office Online Server (May 2025)
The Microsoft Office Online Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...
Description of the security update for Office Online Server: April 8, 2025 (KB5002699)
None None...
Security Updates for Microsoft Office Online Server (April 2025)
The Microsoft Office Online Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...
PT-2025-10824 · Microsoft · Office Excel
Name of the Vulnerable Software and Affected Versions: Microsoft Office Excel affected versions not specified Microsoft Office Online Server version 1.0.0 Description: The issue is related to a use after free vulnerability in Microsoft Office Excel, allowing an unauthorized attacker to execute co...
Security Updates for Microsoft Office Online Server (March 2025)
The Microsoft Office Online Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...
Description of the security update for Office Online Server: February 11, 2025 (KB5002679)
None None...
Security Updates for Microsoft Office Online Server (February 2025)
The Microsoft Office Online Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...
Security Updates for Microsoft Office Online Server (January 2025)
The Microsoft Office Web Apps installation on the remote host is missing a security update. It is, therefore, affected by the following: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized commands. CVE-2025-21345, CVE-2025-21354...