Office Online Server Security Vulnerabilities - CVSS Score 9 - 10

CVE-2019-1205

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. The file could then...

CVE-2023-21716

Microsoft Word Remote Code Execution Vulnerability