Office Online Server@- Security Vulnerabilities and Issues — Office Online Server@- CVE List

Lucene search

MicrosoftOffice Online Server-

89 matches found

CVE•added 2019/01/08 9:29 p.m.•1134 views

CVE-2019-0585

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Execution Vulnerability." This affects Word, Microsoft Office, Microsoft Office Word Viewer, Office 365 ProPlus, Microsoft SharePoint, Microsof...

9.3CVSS8.3AI score0.32912EPSS

CVE•added 2023/09/12 5:15 p.m.•450 views

CVE-2023-36766

Microsoft Excel Information Disclosure Vulnerability

7.8CVSS6AI score0.00334EPSS

CVE•added 2023/06/14 12:15 a.m.•266 views

CVE-2023-33137

Microsoft Excel Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.02565EPSS

CVE•added 2023/03/14 5:15 p.m.•211 views

CVE-2023-23399

Microsoft Excel Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.01945EPSS

CVE•added 2023/05/09 6:15 p.m.•202 views

CVE-2023-24953

Microsoft Excel Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.01011EPSS

CVE•added 2022/06/15 10:15 p.m.•200 views

CVE-2022-30172

Microsoft Office Information Disclosure Vulnerability

5.5CVSS6AI score0.04622EPSS

CVE•added 2022/04/15 7:15 p.m.•194 views

CVE-2022-26901

Microsoft Excel Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.00557EPSS

CVE•added 2021/11/10 1:19 a.m.•191 views

CVE-2021-40442

Microsoft Excel Remote Code Execution Vulnerability

7.8CVSS7.6AI score0.03015EPSS

CVE•added 2021/07/14 6:15 p.m.•187 views

CVE-2021-34501

Microsoft Excel Remote Code Execution Vulnerability

8.8CVSS7.8AI score0.11412EPSS

CVE•added 2021/10/13 1:15 a.m.•185 views

CVE-2021-40486

Microsoft Word Remote Code Execution Vulnerability

7.8CVSS7.7AI score0.02746EPSS

CVE•added 2022/05/10 9:15 p.m.•179 views

CVE-2022-29109

Microsoft Excel Remote Code Execution Vulnerability

7.8CVSS7.9AI score0.03118EPSS

CVE•added 2020/12/10 12:15 a.m.•170 views

CVE-2020-17128

Microsoft Excel Remote Code Execution Vulnerability

9.3CVSS7.8AI score0.05864EPSS

CVE•added 2021/05/11 7:15 p.m.•160 views

CVE-2021-31179

Microsoft Office Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.0296EPSS

CVE•added 2023/06/14 12:15 a.m.•158 views

CVE-2023-32029

Microsoft Excel Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.171EPSS

CVE•added 2019/08/14 9:15 p.m.•155 views

CVE-2019-1201

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. The file could then...

9.3CVSS7.8AI score0.12398EPSS

CVE•added 2021/05/11 7:15 p.m.•153 views

CVE-2021-31177

Microsoft Office Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.03529EPSS

CVE•added 2021/09/15 12:15 p.m.•152 views

CVE-2021-38655

Microsoft Excel Remote Code Execution Vulnerability

7.8CVSS7.5AI score0.06999EPSS

CVE•added 2022/01/11 9:15 p.m.•152 views

CVE-2022-21840

Microsoft Office Remote Code Execution Vulnerability

8.8CVSS8.8AI score0.09199EPSS

CVE•added 2023/08/08 6:15 p.m.•152 views

CVE-2023-36896

Microsoft Excel Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.00766EPSS

CVE•added 2021/05/11 7:15 p.m.•148 views

CVE-2021-31176

Microsoft Office Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.03397EPSS

CVE•added 2021/10/13 1:15 a.m.•148 views

CVE-2021-40474

Microsoft Excel Remote Code Execution Vulnerability

7.8CVSS7.5AI score0.02593EPSS

CVE•added 2022/08/09 8:15 p.m.•148 views

CVE-2022-33648

Microsoft Excel Remote Code Execution Vulnerability

7.8CVSS7.9AI score0.00527EPSS

CVE•added 2021/04/13 8:15 p.m.•145 views

CVE-2021-28453

Microsoft Word Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.0241EPSS

CVE•added 2020/12/10 12:15 a.m.•144 views

CVE-2020-17123

Microsoft Excel Remote Code Execution Vulnerability

9.3CVSS7.8AI score0.04999EPSS

CVE•added 2016/06/16 1:59 a.m.•143 views

CVE-2016-0025

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office 2016, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2, Word Automation Services on SharePoint Server 2013 SP1, Offi...

9.3CVSS7.2AI score0.2879EPSS

CVE•added 2021/01/12 8:15 p.m.•141 views

CVE-2021-1714

Microsoft Excel Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.01784EPSS

CVE•added 2021/05/11 7:15 p.m.•141 views

CVE-2021-31175

Microsoft Office Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.02965EPSS

CVE•added 2023/08/08 6:15 p.m.•139 views

CVE-2023-35371

Microsoft Office Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.00766EPSS

CVE•added 2021/01/12 8:15 p.m.•136 views

CVE-2021-1715

Microsoft Word Remote Code Execution Vulnerability

9.3CVSS7.8AI score0.0208EPSS

CVE•added 2023/03/14 5:15 p.m.•136 views

CVE-2023-23396

Microsoft Excel Denial of Service Vulnerability

6.5CVSS6.5AI score0.04414EPSS

CVE•added 2023/06/14 12:15 a.m.•135 views

CVE-2023-33133

Microsoft Excel Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.14181EPSS

CVE•added 2020/12/10 12:15 a.m.•134 views

CVE-2020-17129

Microsoft Excel Remote Code Execution Vulnerability

9.3CVSS7.8AI score0.06001EPSS

CVE•added 2024/11/12 6:15 p.m.•134 views

CVE-2024-49026

Microsoft Excel Remote Code Execution Vulnerability

7.8CVSS7.9AI score0.00175EPSS

CVE•added 2020/08/17 7:15 p.m.•131 views

CVE-2020-1583

An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the user’s computer or data.To exploit the vulnerability, an attacker could craft a special documen...

8.8CVSS8AI score0.18011EPSS

CVE•added 2020/01/14 11:15 p.m.•130 views

CVE-2020-0647

A spoofing vulnerability exists when Office Online does not validate origin in cross-origin communications correctly, aka 'Microsoft Office Online Spoofing Vulnerability'.

5.8CVSS6AI score0.00578EPSS

CVE•added 2021/05/11 7:15 p.m.•130 views

CVE-2021-31178

Microsoft Office Information Disclosure Vulnerability

5.5CVSS6.1AI score0.14912EPSS

CVE•added 2021/07/16 9:15 p.m.•130 views

CVE-2021-34451

Microsoft Office Online Server Spoofing Vulnerability

5.3CVSS5.5AI score0.00456EPSS

CVE•added 2022/02/09 5:15 p.m.•130 views

CVE-2022-22716

Microsoft Excel Information Disclosure Vulnerability

5.5CVSS5.4AI score0.0158EPSS

CVE•added 2019/08/14 9:15 p.m.•128 views

CVE-2019-1205

9.8CVSS8.8AI score0.12237EPSS

CVE•added 2020/12/10 12:15 a.m.•126 views

CVE-2020-17125

Microsoft Excel Remote Code Execution Vulnerability

9.3CVSS7.8AI score0.06001EPSS

CVE•added 2019/06/12 2:29 p.m.•121 views

CVE-2019-1035

9.3CVSS7.6AI score0.13047EPSS

CVE•added 2020/08/17 7:15 p.m.•121 views

CVE-2020-1495

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administ...

9.3CVSS8.7AI score0.15901EPSS

CVE•added 2021/04/13 8:15 p.m.•120 views

CVE-2021-28454

Microsoft Excel Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.03974EPSS

CVE•added 2021/05/11 7:15 p.m.•120 views

CVE-2021-31174

Microsoft Excel Information Disclosure Vulnerability

5.5CVSS6.1AI score0.00503EPSS

CVE•added 2019/05/16 7:29 p.m.•119 views

CVE-2019-0953

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'.

9.3CVSS7.9AI score0.25636EPSS

CVE•added 2021/01/12 8:15 p.m.•119 views

CVE-2021-1713

Microsoft Excel Remote Code Execution Vulnerability

7.8CVSS7.6AI score0.02899EPSS

CVE•added 2020/04/15 3:15 p.m.•118 views

CVE-2020-0980

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'.

9.3CVSS8.3AI score0.33652EPSS

CVE•added 2021/04/13 8:15 p.m.•116 views

CVE-2021-28451

Microsoft Excel Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.04005EPSS

CVE•added 2021/10/13 1:15 a.m.•116 views

CVE-2021-40472

Microsoft Excel Information Disclosure Vulnerability

5.5CVSS5.9AI score0.00461EPSS

CVE•added 2022/11/09 10:15 p.m.•116 views

CVE-2022-41061

Microsoft Word Remote Code Execution Vulnerability