VendorsMicrosoftoffice_online_serverany version
Vulnerabilities

Microsoft Office Online Server any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

216CVEs
CVE-2026-55947
Microsoft Excel Remote Code Execution Vulnerability
Published 2026-07-14 · Analyzed
7.8EPSS 0.005
CVE-2026-55899
Microsoft Excel Remote Code Execution Vulnerability
Published 2026-07-14 · Analyzed
7.8EPSS 0.005
CVE-2025-49711
Microsoft Excel Remote Code Execution Vulnerability
Published 2025-07-08 · Analyzed
7.8EPSS 0.005
CVE-2025-59223
Microsoft Excel Remote Code Execution Vulnerability
Published 2025-10-14 · Analyzed
7.8EPSS 0.004
CVE-2025-59224
Microsoft Excel Remote Code Execution Vulnerability
Published 2025-10-14 · Analyzed
7.8EPSS 0.004
CVE-2025-59225
Microsoft Excel Remote Code Execution Vulnerability
Published 2025-10-14 · Analyzed
7.8EPSS 0.004
CVE-2025-59235
Microsoft Excel Information Disclosure Vulnerability
Published 2025-10-14 · Analyzed
7.1EPSS 0.007
CVE-2025-60726
Microsoft Excel Information Disclosure Vulnerability
Published 2025-11-11 · Analyzed
7.1EPSS 0.006
CVE-2026-32188
Microsoft Excel Information Disclosure Vulnerability
Published 2026-04-14 · Analyzed
7.1EPSS 0.005
CVE-2026-55122
Microsoft Excel Information Disclosure Vulnerability
Published 2026-07-14 · Analyzed
7.1EPSS 0.005
CVE-2025-62202
Microsoft Excel Information Disclosure Vulnerability
Published 2025-11-11 · Analyzed
7.1EPSS 0.005
CVE-2025-59232
Microsoft Excel Information Disclosure Vulnerability
Published 2025-10-14 · Analyzed
7.1EPSS 0.005
CVE-2026-55898
Microsoft Excel Information Disclosure Vulnerability
Published 2026-07-14 · Analyzed
7.1EPSS 0.005
CVE-2026-44818
Microsoft Excel Remote Code Execution Vulnerability
Published 2026-06-09 · Modified
7.0EPSS 0.003
CVE-2026-50678
Microsoft Excel Information Disclosure Vulnerability
Published 2026-07-14 · Analyzed
6.6EPSS 0.005
CVE-2023-23396
Microsoft Excel Denial of Service Vulnerability
Published 2023-03-14 · Modified
6.5EPSS 0.038
CVE-2026-55054
Microsoft Excel Information Disclosure Vulnerability
Published 2026-07-14 · Analyzed
6.5EPSS 0.009
CVE-2020-1442
A spoofing vulnerability exists when an Office Web Apps server does not properly sanitize a specially crafted request, aka 'Office Web Apps XSS Vulnerability'.
Published 2020-07-14 · Modified
6.1EPSS 0.017
CVE-2026-54988
Microsoft Excel Information Disclosure Vulnerability
Published 2026-07-14 · Analyzed
6.1EPSS 0.005
CVE-2020-0695
A spoofing vulnerability exists when Office Online Server does not validate origin in cross-origin communications correctly, aka 'Microsoft Office Online Server Spoofing Vulnerability'.
Published 2020-02-11 · Modified
5.8EPSS 0.010
CVE-2020-0647
A spoofing vulnerability exists when Office Online does not validate origin in cross-origin communications correctly, aka 'Microsoft Office Online Spoofing Vulnerability'.
Published 2020-01-14 · Modified
5.8EPSS 0.009
CVE-2019-1445
A spoofing vulnerability exists when Office Online does not validate origin in cross-origin communications handlers correctly, aka 'Microsoft Office Online Spoofing Vulnerability'. This CVE ID is unique from CVE-2019-1447.
Published 2019-11-12 · Modified
5.8EPSS 0.008
CVE-2019-1447
A spoofing vulnerability exists when Office Online does not validate origin in cross-origin communications handlers correctly, aka 'Microsoft Office Online Spoofing Vulnerability'. This CVE ID is unique from CVE-2019-1445.
Published 2019-11-12 · Modified
5.8EPSS 0.008
CVE-2021-31178
Microsoft Office Information Disclosure Vulnerability
Published 2021-05-11 · Modified
5.5EPSS 0.160
CVE-2019-1446
An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosure Vulnerability'.
Published 2019-11-12 · Modified
5.5EPSS 0.089
CVE-2020-1342
An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka 'Microsoft Office Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1445.
Published 2020-07-14 · Modified
5.5EPSS 0.064
CVE-2020-1445
An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, aka 'Microsoft Office Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1342.
Published 2020-07-14 · Modified
5.5EPSS 0.061
CVE-2020-1502
Microsoft Word Information Disclosure Vulnerability
Published 2020-08-17 · Modified
5.5EPSS 0.046
CVE-2022-22716
Microsoft Excel Information Disclosure Vulnerability
Published 2022-02-09 · Modified
5.5EPSS 0.046
CVE-2020-1503
Microsoft Word Information Disclosure Vulnerability
Published 2020-08-17 · Modified
5.5EPSS 0.046
CVE-2020-1224
Microsoft Excel Information Disclosure Vulnerability
Published 2020-09-11 · Modified
5.5EPSS 0.044
CVE-2021-28456
Microsoft Excel Information Disclosure Vulnerability
Published 2021-04-13 · Modified
5.5EPSS 0.037
CVE-2021-31174
Microsoft Excel Information Disclosure Vulnerability
Published 2021-05-11 · Modified
5.5EPSS 0.029
CVE-2022-30172
Microsoft Office Information Disclosure Vulnerability
Published 2022-06-15 · Modified
5.5EPSS 0.027
CVE-2022-30159
Microsoft Office Information Disclosure Vulnerability
Published 2022-06-15 · Modified
5.5EPSS 0.027
CVE-2022-30171
Microsoft Office Information Disclosure Vulnerability
Published 2022-06-15 · Modified
5.5EPSS 0.026
CVE-2020-17126
Microsoft Excel Information Disclosure Vulnerability
Published 2020-12-09 · Modified
5.5EPSS 0.011
CVE-2022-41103
Microsoft Word Information Disclosure Vulnerability
Published 2022-11-09 · Modified
5.5EPSS 0.009
CVE-2022-41060
Microsoft Word Information Disclosure Vulnerability
Published 2022-11-09 · Modified
5.5EPSS 0.008
CVE-2023-33162
Microsoft Excel Information Disclosure Vulnerability
Published 2023-07-11 · Modified
5.5EPSS 0.008
← Prev5 / 6Next →