Office Online Server Security Vulnerabilities and Issues — Office Online Server CVE List

Lucene search

MicrosoftOffice Online Server

140 matches found

CVE•added 2019/01/08 9:29 p.m.•1134 views

CVE-2019-0585

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Execution Vulnerability." This affects Word, Microsoft Office, Microsoft Office Word Viewer, Office 365 ProPlus, Microsoft SharePoint, Microsof...

9.3CVSS8.3AI score0.32912EPSS

CVE•added 2017/10/13 1:29 p.m.•914 views

CVE-2017-11826

Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Word Viewer, Word 2007, 2010, 2013 and 2016, Word Automation Services, and Office Online Server allow remote code execution when the software fails to properly h...

9.3CVSS7.9AI score0.89654EPSS

CVE•added 2023/02/14 8:15 p.m.•575 views

CVE-2023-21716

Microsoft Word Remote Code Execution Vulnerability

9.8CVSS9.6AI score0.91212EPSS

CVE•added 2018/12/12 12:29 a.m.•482 views

CVE-2018-8628

A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory, aka "Microsoft PowerPoint Remote Code Execution Vulnerability." This affects Microsoft Office, Office 365 ProPlus, Microsoft PowerPoint, Microsoft SharePoint, ...

9.3CVSS6.1AI score0.35597EPSS

CVE•added 2023/09/12 5:15 p.m.•450 views

CVE-2023-36766

Microsoft Excel Information Disclosure Vulnerability

7.8CVSS6AI score0.00334EPSS

CVE•added 2023/06/14 12:15 a.m.•266 views

CVE-2023-33137

Microsoft Excel Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.02565EPSS

CVE•added 2017/05/12 2:29 p.m.•238 views

CVE-2017-0281

Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2016, Office Online Server 2016, Office Web Apps 2010 SP2,Office Web Apps 2013 SP1, Project Server 2013 SP1, SharePoint Enterprise Server 2013 SP1, SharePoint Enterprise Server 2016, SharePoint Foundation 2013 SP1, Sharepoint Serve...

9.3CVSS8.1AI score0.92255EPSS

CVE•added 2025/02/11 6:15 p.m.•231 views

CVE-2025-21381

Microsoft Excel Remote Code Execution Vulnerability

7.8CVSS7.9AI score0.00305EPSS

CVE•added 2023/03/14 5:15 p.m.•211 views

CVE-2023-23399

Microsoft Excel Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.01945EPSS

CVE•added 2023/05/09 6:15 p.m.•202 views

CVE-2023-24953

Microsoft Excel Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.01011EPSS

CVE•added 2022/06/15 10:15 p.m.•200 views

CVE-2022-30172

Microsoft Office Information Disclosure Vulnerability

5.5CVSS6AI score0.04622EPSS

CVE•added 2022/04/15 7:15 p.m.•194 views

CVE-2022-26901

Microsoft Excel Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.00557EPSS

CVE•added 2021/11/10 1:19 a.m.•191 views

CVE-2021-40442

Microsoft Excel Remote Code Execution Vulnerability

7.8CVSS7.6AI score0.03015EPSS

CVE•added 2021/07/14 6:15 p.m.•187 views

CVE-2021-34501

Microsoft Excel Remote Code Execution Vulnerability

8.8CVSS7.8AI score0.11412EPSS

CVE•added 2021/10/13 1:15 a.m.•185 views

CVE-2021-40486

Microsoft Word Remote Code Execution Vulnerability

7.8CVSS7.7AI score0.02746EPSS

CVE•added 2020/07/14 11:15 p.m.•179 views

CVE-2020-1446

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1447, CVE-2020-1448.

8.8CVSS8.8AI score0.43263EPSS

CVE•added 2022/05/10 9:15 p.m.•179 views

CVE-2022-29109

Microsoft Excel Remote Code Execution Vulnerability

7.8CVSS7.9AI score0.03118EPSS

CVE•added 2020/10/16 11:15 p.m.•176 views

CVE-2020-16929

<p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with admin...

7.8CVSS7.9AI score0.11232EPSS

CVE•added 2020/12/10 12:15 a.m.•170 views

CVE-2020-17128

Microsoft Excel Remote Code Execution Vulnerability

9.3CVSS7.8AI score0.05864EPSS

CVE•added 2018/01/10 1:29 a.m.•166 views

CVE-2018-0797

Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way RTF content is handled, aka "Microsoft Word Memory Corruption Vulnerability".

9.3CVSS8.2AI score0.44732EPSS

CVE•added 2021/05/11 7:15 p.m.•160 views

CVE-2021-31179

Microsoft Office Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.0296EPSS

CVE•added 2023/06/14 12:15 a.m.•158 views

CVE-2023-32029

Microsoft Excel Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.171EPSS

CVE•added 2019/08/14 9:15 p.m.•155 views

CVE-2019-1201

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. The file could then...

9.3CVSS7.8AI score0.12398EPSS

CVE•added 2021/05/11 7:15 p.m.•153 views

CVE-2021-31177

Microsoft Office Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.03529EPSS

CVE•added 2021/09/15 12:15 p.m.•152 views

CVE-2021-38655

Microsoft Excel Remote Code Execution Vulnerability

7.8CVSS7.5AI score0.06999EPSS

CVE•added 2022/01/11 9:15 p.m.•152 views

CVE-2022-21840

Microsoft Office Remote Code Execution Vulnerability

8.8CVSS8.8AI score0.09199EPSS

CVE•added 2023/08/08 6:15 p.m.•152 views

CVE-2023-36896

Microsoft Excel Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.00766EPSS

CVE•added 2021/05/11 7:15 p.m.•148 views

CVE-2021-31176

Microsoft Office Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.03397EPSS

CVE•added 2021/10/13 1:15 a.m.•148 views

CVE-2021-40474

Microsoft Excel Remote Code Execution Vulnerability

7.8CVSS7.5AI score0.02593EPSS

CVE•added 2022/08/09 8:15 p.m.•148 views

CVE-2022-33648

Microsoft Excel Remote Code Execution Vulnerability

7.8CVSS7.9AI score0.00527EPSS

CVE•added 2020/10/16 11:15 p.m.•146 views

CVE-2020-16932

7.8CVSS7.7AI score0.07314EPSS

CVE•added 2021/04/13 8:15 p.m.•145 views

CVE-2021-28453

Microsoft Word Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.0241EPSS

CVE•added 2020/10/16 11:15 p.m.•144 views

CVE-2020-16931

7.8CVSS7.7AI score0.07314EPSS

CVE•added 2020/12/10 12:15 a.m.•144 views

CVE-2020-17123

Microsoft Excel Remote Code Execution Vulnerability

9.3CVSS7.8AI score0.04999EPSS

CVE•added 2016/06/16 1:59 a.m.•143 views

CVE-2016-0025

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office 2016, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2, Word Automation Services on SharePoint Server 2013 SP1, Offi...

9.3CVSS7.2AI score0.2879EPSS

CVE•added 2021/01/12 8:15 p.m.•141 views

CVE-2021-1714

Microsoft Excel Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.01784EPSS

CVE•added 2021/05/11 7:15 p.m.•141 views

CVE-2021-31175

Microsoft Office Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.02965EPSS

CVE•added 2023/08/08 6:15 p.m.•139 views

CVE-2023-35371

Microsoft Office Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.00766EPSS

CVE•added 2021/01/12 8:15 p.m.•136 views

CVE-2021-1715

Microsoft Word Remote Code Execution Vulnerability

9.3CVSS7.8AI score0.0208EPSS

CVE•added 2023/03/14 5:15 p.m.•136 views

CVE-2023-23396

Microsoft Excel Denial of Service Vulnerability

6.5CVSS6.5AI score0.04414EPSS

CVE•added 2023/06/14 12:15 a.m.•135 views

CVE-2023-33133

Microsoft Excel Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.14181EPSS

CVE•added 2020/12/10 12:15 a.m.•134 views

CVE-2020-17129

Microsoft Excel Remote Code Execution Vulnerability

9.3CVSS7.8AI score0.06001EPSS

CVE•added 2024/11/12 6:15 p.m.•134 views

CVE-2024-49026

Microsoft Excel Remote Code Execution Vulnerability

7.8CVSS7.9AI score0.00175EPSS

CVE•added 2020/03/12 4:15 p.m.•133 views

CVE-2020-0850

8.8CVSS7.9AI score0.33652EPSS

CVE•added 2020/08/17 7:15 p.m.•131 views

CVE-2020-1583

An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the user’s computer or data.To exploit the vulnerability, an attacker could craft a special documen...

8.8CVSS8AI score0.18011EPSS

CVE•added 2020/01/14 11:15 p.m.•130 views

CVE-2020-0647

A spoofing vulnerability exists when Office Online does not validate origin in cross-origin communications correctly, aka 'Microsoft Office Online Spoofing Vulnerability'.

5.8CVSS6AI score0.00578EPSS

CVE•added 2021/05/11 7:15 p.m.•130 views

CVE-2021-31178

Microsoft Office Information Disclosure Vulnerability

5.5CVSS6.1AI score0.14912EPSS

CVE•added 2021/07/16 9:15 p.m.•130 views

CVE-2021-34451

Microsoft Office Online Server Spoofing Vulnerability

5.3CVSS5.5AI score0.00456EPSS

CVE•added 2022/02/09 5:15 p.m.•130 views

CVE-2022-22716

Microsoft Excel Information Disclosure Vulnerability