Office Online Server (Microsoft) - vulnerabilities (CVEs)

282 CVEs, 44 in the last 30 days, 23 known versions, newest CVE from 2026-10-15. Vendor: Microsoft.

CVEs of Office Online Server

• CVE-2026-108446 - CVSS 8.8 (high), 2026-10-15: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-100212 - CVSS 8.8 (high), 2026-10-13: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-100210 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97768 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97775 - CVSS 8.8 (high), 2026-10-13: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97772 - CVSS 8.8 (high), 2026-10-13: Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97742 - CVSS 8.8 (high), 2026-10-13: Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97763 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97004 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97777 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97757 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97010 - CVSS 8.8 (high), 2026-10-13: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97762 - CVSS 8.8 (high), 2026-10-13: Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97746 - CVSS 8.8 (high), 2026-10-13: Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97760 - CVSS 6.5 (medium), 2026-10-13: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
• CVE-2026-97738 - CVSS 8.8 (high), 2026-10-13: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97748 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97007 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97773 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97769 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97779 - CVSS 6.5 (medium), 2026-10-13: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
• CVE-2026-97756 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97008 - CVSS 8.8 (high), 2026-10-13: Buffer underwrite ('buffer underflow') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97765 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97778 - CVSS 8.8 (high), 2026-10-13: Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97755 - CVSS 8.8 (high), 2026-10-13: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97739 - CVSS 8.8 (high), 2026-10-13: Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97771 - CVSS 8.8 (high), 2026-10-13: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97752 - CVSS 8.8 (high), 2026-10-13: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97758 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97767 - CVSS 8.8 (high), 2026-10-13: Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97747 - CVSS 8.8 (high), 2026-10-13: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97770 - CVSS 8.8 (high), 2026-10-13: Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97751 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97754 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97780 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97003 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97776 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97017 - CVSS 8.8 (high), 2026-10-13: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97740 - CVSS 6.5 (medium), 2026-10-13: Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information…
• CVE-2026-97766 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97750 - CVSS 8.8 (high), 2026-10-13: Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97753 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-105718 - CVSS 8.8 (high), 2026-10-13: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-81956 - CVSS 7.8 (high), 2026-09-08: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81401 - CVSS 5.5 (medium), 2026-09-08: Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-81390 - CVSS 5.5 (medium), 2026-09-08: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-81947 - CVSS 7.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-55949 - CVSS 7.8 (high), 2026-07-14: Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-55947 - CVSS 7.8 (high), 2026-07-14: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-55898 - CVSS 7.1 (high), 2026-07-14: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-54131 - CVSS 7.8 (high), 2026-07-14: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-55128 - CVSS 7.8 (high), 2026-07-14: Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
• CVE-2026-55131 - CVSS 7.8 (high), 2026-07-14: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-55053 - CVSS 7.8 (high), 2026-07-14: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-55122 - CVSS 7.1 (high), 2026-07-14: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-55137 - CVSS 7.8 (high), 2026-07-14: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-55058 - CVSS 7.8 (high), 2026-07-14: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-55037 - CVSS 7.8 (high), 2026-07-14: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-55054 - CVSS 6.5 (medium), 2026-07-14: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
• CVE-2026-55044 - CVSS 7.8 (high), 2026-07-14: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-55036 - CVSS 7.8 (high), 2026-07-14: Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-55141 - CVSS 7.8 (high), 2026-07-14: Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-55127 - CVSS 7.8 (high), 2026-07-14: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
• CVE-2026-55136 - CVSS 7.8 (high), 2026-07-14: Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-55124 - CVSS 5.5 (medium), 2026-07-14: Improper validation of specified type of input in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
• CVE-2026-55138 - CVSS 5.5 (medium), 2026-07-14: Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-55041 - CVSS 7.8 (high), 2026-07-14: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-55050 - CVSS 5.5 (medium), 2026-07-14: Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
• CVE-2026-55039 - CVSS 7.8 (high), 2026-07-14: Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-55047 - CVSS 5.5 (medium), 2026-07-14: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
• CVE-2026-55029 - CVSS 7.8 (high), 2026-07-14: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-55048 - CVSS 7.8 (high), 2026-07-14: Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-55031 - CVSS 7.8 (high), 2026-07-14: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-55025 - CVSS 7.8 (high), 2026-07-14: Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-55046 - CVSS 5.5 (medium), 2026-07-14: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-50408 - CVSS 5.5 (medium), 2026-07-14: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-55024 - CVSS 7.8 (high), 2026-07-14: Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-48580 - CVSS 5.5 (medium), 2026-07-14: Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-47642 - CVSS 7.8 (high), 2026-07-14: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-58618 - CVSS 7.8 (high), 2026-07-14: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-55948 - CVSS 7.8 (high), 2026-07-14: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-55899 - CVSS 7.8 (high), 2026-07-14: Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-54988 - CVSS 6.1 (medium), 2026-07-14: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-50678 - CVSS 6.6 (medium), 2026-07-14: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-50675 - CVSS 7.8 (high), 2026-07-14: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-45469 - CVSS 7.8 (high), 2026-06-09: Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-45455 - CVSS 4.3 (medium), 2026-06-09: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-44822 - CVSS 8.2 (high), 2026-06-09: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
• CVE-2026-44820 - CVSS 7.8 (high), 2026-06-09: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-44818 - CVSS 7 (high), 2026-06-09: Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Office Excel allows an unauthorized attacker to…
• CVE-2026-44823 - CVSS 7.8 (high), 2026-06-09: Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-44817 - CVSS 7.8 (high), 2026-06-09: Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-40362 - CVSS 7.8 (high), 2026-05-12: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-40359 - CVSS 7.8 (high), 2026-05-12: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-40360 - CVSS 7.8 (high), 2026-05-12: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-32199 - CVSS 7.8 (high), 2026-04-14: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-32198 - CVSS 7.8 (high), 2026-04-14: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-32197 - CVSS 7.8 (high), 2026-04-14: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-32189 - CVSS 7.8 (high), 2026-04-14: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.