VendorsMicrosoftoffice_online_serverany version

Vulnerabilities

Microsoft Office Online Server any version

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

260CVEs

CVE-2019-1205

Microsoft Word Remote Code Execution Vulnerability

Published 2019-08-14 · Modified

9.8EPSS 0.040

CVE-2016-3282

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, Word Automation Services on SharePoint Server 2013 SP1, SharePoint Server 2016, Office Web Apps 2010 SP2, Office Web Apps Server 2013 SP1, and Office Online Server allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."

Published 2016-07-13 · Modified

9.3EPSS 0.263

CVE-2017-8743

A remote code execution vulnerability exists in Microsoft PowerPoint 2016, Microsoft SharePoint Enterprise Server 2016, and Office Online Server when they fail to properly handle objects in memory, aka "PowerPoint Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-8742.

Published 2017-09-13 · Modified

9.3EPSS 0.221

CVE-2019-0585

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Execution Vulnerability." This affects Word, Microsoft Office, Microsoft Office Word Viewer, Office 365 ProPlus, Microsoft SharePoint, Microsoft Office Online Server, Microsoft Word, Microsoft SharePoint Server.

Published 2019-01-08 · Modified

9.3EPSS 0.220

CVE-2016-3365

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, Excel Viewer, Excel Services on SharePoint Server 2007 SP3, Excel Services on SharePoint Server 2010 SP2, Excel Automation Services on SharePoint Server 2013 SP1, and Office Online Server allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3362.

Published 2016-09-14 · Modified

9.3EPSS 0.199

CVE-2019-1331

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1327.

Published 2019-10-10 · Modified

9.3EPSS 0.197

CVE-2016-3358

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel 2016 for Mac, Office Compatibility Pack SP3, Excel Viewer, Excel Services on SharePoint Server 2007 SP3, Excel Services on SharePoint Server 2010 SP2, Excel Automation Services on SharePoint Server 2013 SP1, and Office Online Server allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."

Published 2016-09-14 · Modified

9.3EPSS 0.184

CVE-2016-3362

Published 2016-09-14 · Modified

9.3EPSS 0.175

CVE-2017-8631

A remote code execution vulnerability exists in Excel Services, Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2016, Microsoft Office Web Apps 2013, Microsoft Office Compatibility Pack Service Pack 3, Microsoft Excel Web App 2013 Service Pack 1, Microsoft Excel Viewer 2007 Service Pack 3, and Office Online Server when they fail to properly handle objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8630, CVE-2017-8632, and CVE-2017-8744.

Published 2017-09-13 · Modified

9.3EPSS 0.170

CVE-2016-0025

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office 2016, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2, Word Automation Services on SharePoint Server 2013 SP1, Office Web Apps 2010 SP2, Office Web Apps Server 2013 SP1, and Office Online Server allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."

Published 2016-06-16 · Modified

9.3EPSS 0.167

CVE-2018-8628

A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory, aka "Microsoft PowerPoint Remote Code Execution Vulnerability." This affects Microsoft Office, Office 365 ProPlus, Microsoft PowerPoint, Microsoft SharePoint, Microsoft PowerPoint Viewer, Office Online Server, Microsoft SharePoint Server.

Published 2018-12-12 · Modified

9.3EPSS 0.159

CVE-2019-0953

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'.

Published 2019-05-16 · Modified

9.3EPSS 0.129

CVE-2020-0980

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'.

Published 2020-04-15 · Modified

9.3EPSS 0.118

CVE-2019-1035

Microsoft Word Remote Code Execution Vulnerability

Published 2019-06-12 · Modified

9.3EPSS 0.063

CVE-2019-1034

Microsoft Word Remote Code Execution Vulnerability

Published 2019-06-12 · Modified

9.3EPSS 0.049

CVE-2019-1201

Microsoft Word Remote Code Execution Vulnerability

Published 2019-08-14 · Modified

9.3EPSS 0.049

CVE-2020-1495

Microsoft Excel Remote Code Execution Vulnerability

Published 2020-08-17 · Modified

9.3EPSS 0.042

CVE-2020-17065

Microsoft Excel Remote Code Execution Vulnerability

Published 2020-11-11 · Modified

9.3EPSS 0.041

CVE-2021-1715

Microsoft Word Remote Code Execution Vulnerability

Published 2021-01-12 · Modified

9.3EPSS 0.039

CVE-2021-1716

Microsoft Word Remote Code Execution Vulnerability

Published 2021-01-12 · Modified

9.3EPSS 0.039

CVE-2020-17123

Microsoft Excel Remote Code Execution Vulnerability

Published 2020-12-09 · Modified

9.3EPSS 0.036

CVE-2020-17125

Microsoft Excel Remote Code Execution Vulnerability

Published 2020-12-09 · Modified

9.3EPSS 0.035

CVE-2020-17129

Microsoft Excel Remote Code Execution Vulnerability

Published 2020-12-09 · Modified

9.3EPSS 0.035

CVE-2020-17128

Microsoft Excel Remote Code Execution Vulnerability

Published 2020-12-09 · Modified

9.3EPSS 0.027

CVE-2021-34501

Microsoft Excel Remote Code Execution Vulnerability

Published 2021-07-14 · Modified

8.8EPSS 0.517

CVE-2020-1583

Microsoft Word Information Disclosure Vulnerability

Published 2020-08-17 · Modified

8.8EPSS 0.049

CVE-2020-1338

Microsoft Word Remote Code Execution Vulnerability

Published 2020-09-11 · Modified

8.8EPSS 0.039

CVE-2020-1218

Microsoft Word Remote Code Execution Vulnerability

Published 2020-09-11 · Modified

8.8EPSS 0.038

CVE-2022-21840

Microsoft Office Remote Code Execution Vulnerability

Published 2022-01-11 · Modified

8.8EPSS 0.033

CVE-2022-41106

Microsoft Excel Remote Code Execution Vulnerability

Published 2022-11-09 · Modified

8.8EPSS 0.028

CVE-2026-105718

Microsoft Excel Remote Code Execution Vulnerability