Microsoft Office Online Server (Microsoft) - vulnerabilities (CVEs)
14 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2020-07-14. Vendor: Microsoft.
CVEs of Microsoft Office Online Server
- CVE-2020-1448 - CVSS 8.8 (high), 2020-07-14: A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code…
- CVE-2020-1445 - CVSS 5.5 (medium), 2020-07-14: An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, aka 'Microsoft Office Information…
- CVE-2020-1442 - CVSS 6.1 (medium), 2020-07-14: A spoofing vulnerability exists when an Office Web Apps server does not properly sanitize a specially crafted request, aka 'Office Web Apps XSS Vulnerability'.
- CVE-2020-1447 - CVSS 8.8 (high), 2020-07-14: A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code…
- CVE-2020-1446 - CVSS 8.8 (high), 2020-07-14: A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code…
- CVE-2020-1342 - CVSS 5.5 (medium), 2020-07-14: An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose…
- CVE-2020-0980 - CVSS 7.8 (high), 2020-04-15: A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code…
- CVE-2020-0892 - CVSS 7.8 (high), 2020-03-12: A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code…
- CVE-2020-0850 - CVSS 8.8 (high), 2020-03-12: A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code…
- CVE-2020-0852 - CVSS 7.8 (high), 2020-03-12: A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code…
- CVE-2019-1446 - CVSS 5.5 (medium), 2019-11-12: An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information…
- CVE-2019-0953 - CVSS 7.8 (high), 2019-05-16: A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code…
- CVE-2019-0585 - CVSS 8.8 (high), 2019-01-08: A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code…
- CVE-2018-8247 - CVSS 5.4 (medium), 2018-06-14: An elevation of privilege vulnerability exists when Office Web Apps Server 2013 and Office Online Server fail to properly handle web requests, aka "Microsoft…
