cbcvebase.

Microsoft Office Online Server vulnerabilities

80 known vulnerabilities affecting microsoft/microsoft_office_online_server.

Total CVEs
80
CISA KEV
0
Public exploits
3
Exploited in wild
1
Severity breakdown
CRITICAL2HIGH56MEDIUM22

Vulnerabilities

Page 1 of 4
CVE-2023-21716P1CRITICALCVSS 9.8ExploitedPoC≥ 16.0.1, < 16.0.10395.200012023-02-14
CVE-2023-21716 [CRITICAL] CWE-190 CVE-2023-21716: Microsoft Word Remote Code Execution Vulnerability Microsoft Word Remote Code Execution Vulnerability
nvd
CVE-2021-34501P2HIGHCVSS 8.8≥ 16.0.1, < 16.0.10376.200012021-07-14
CVE-2021-34501 [HIGH] CVE-2021-34501: Microsoft Excel Remote Code Execution Vulnerability Microsoft Excel Remote Code Execution Vulnerability
nvd
CVE-2023-33137P3HIGHCVSS 7.8PoC≥ 16.0.1, < 16.0.10399.200002023-06-14
CVE-2023-33137 [HIGH] CWE-415 CVE-2023-33137: Microsoft Excel Remote Code Execution Vulnerability Microsoft Excel Remote Code Execution Vulnerability
nvd
CVE-2023-23399P3HIGHCVSS 7.8PoC≥ 16.0.1, < 16.0.10396.200002023-03-14
CVE-2023-23399 [HIGH] CWE-125 CVE-2023-23399: Microsoft Excel Remote Code Execution Vulnerability Microsoft Excel Remote Code Execution Vulnerability
nvd
CVE-2023-32029P3HIGHCVSS 7.8≥ 16.0.1, < 16.0.10399.200002023-06-14
CVE-2023-32029 [HIGH] CWE-125 CVE-2023-32029: Microsoft Excel Remote Code Execution Vulnerability Microsoft Excel Remote Code Execution Vulnerability
nvd
CVE-2023-33133P3HIGHCVSS 7.8≥ 16.0.1, < 16.0.10399.200002023-06-14
CVE-2023-33133 [HIGH] CWE-122 CVE-2023-33133: Microsoft Excel Remote Code Execution Vulnerability Microsoft Excel Remote Code Execution Vulnerability
nvd
CVE-2019-0585P3HIGHCVSS 8.8vMicrosoft Office Online Server2019-01-08
CVE-2019-0585 [HIGH] CVE-2019-0585: A remote code execution vulnerability exists in Microsoft Word software when it fails to properly ha A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Execution Vulnerability." This affects Word, Microsoft Office, Microsoft Office Word Viewer, Office 365 ProPlus, Microsoft SharePoint, Microsoft Office Online Server, Microsoft Word, Microsoft SharePoint Ser
nvd
CVE-2022-41106P3HIGHCVSS 8.8≥ 16.0.1, < 16.0.10392.200002022-11-09
CVE-2022-41106 [HIGH] CVE-2022-41106: Microsoft Excel Remote Code Execution Vulnerability Microsoft Excel Remote Code Execution Vulnerability
nvd
CVE-2019-1205P3CRITICALCVSS 9.8≥ 16.0.1, < publication2019-08-14
CVE-2019-1205 [CRITICAL] CVE-2019-1205: A remote code execution vulnerability exists in Microsoft Word software when it fails to properly ha A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. The file could then take actions on behalf of the logged-on user with the same
nvd
CVE-2020-1446P3HIGHCVSS 8.8vunspecified2020-07-14
CVE-2020-1446 [HIGH] CVE-2020-1446: A remote code execution vulnerability exists in Microsoft Word software when it fails to properly ha A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1447, CVE-2020-1448.
nvd
CVE-2020-0850P3HIGHCVSS 8.8vunspecified2020-03-12
CVE-2020-0850 [HIGH] CVE-2020-0850: A remote code execution vulnerability exists in Microsoft Word software when it fails to properly ha A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0851, CVE-2020-0852, CVE-2020-0855, CVE-2020-0892.
nvd
CVE-2020-1335P3HIGHCVSS 8.8≥ 16.0.1, < publication2020-09-11
CVE-2020-1335 [HIGH] CVE-2020-1335: <p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affecte
nvd
CVE-2022-21840P3HIGHCVSS 8.8≥ 16.0.1, < 16.0.10382.200042022-01-11
CVE-2022-21840 [HIGH] CVE-2022-21840: Microsoft Office Remote Code Execution Vulnerability Microsoft Office Remote Code Execution Vulnerability
nvd
CVE-2020-1338P3HIGHCVSS 8.8≥ 16.0.1, < publication2020-09-11
CVE-2020-1338 [HIGH] CVE-2020-1338: <p>A remote code execution vulnerability exists in Microsoft Word software when it fails to properly A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, the file could then take actions on behalf of the logged-on user with
nvd
CVE-2020-1218P3HIGHCVSS 8.8≥ 16.0.1, < publication2020-09-11
CVE-2020-1218 [HIGH] CVE-2020-1218: <p>A remote code execution vulnerability exists in Microsoft Word software when it fails to properly A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, the file could then take actions on behalf of the logged-on user with
nvd
CVE-2021-31179P3HIGHCVSS 7.8≥ 16.0.1, < 16.0.10374.200002021-05-11
CVE-2021-31179 [HIGH] CVE-2021-31179: Microsoft Office Remote Code Execution Vulnerability Microsoft Office Remote Code Execution Vulnerability
nvd
CVE-2018-8245P3HIGHCVSS 7.8v20162018-06-14
CVE-2018-8245 [HIGH] CVE-2018-8245: A remote code execution vulnerability exists when Microsoft Publisher fails to utilize features that A remote code execution vulnerability exists when Microsoft Publisher fails to utilize features that lock down the Local Machine zone when instantiating OLE objects, aka "Microsoft Publisher Remote Code Execution Vulnerability." This affects Microsoft Publisher.
nvd
CVE-2020-0980P3HIGHCVSS 7.8vunspecified2020-04-15
CVE-2020-0980 [HIGH] CVE-2020-0980: A remote code execution vulnerability exists in Microsoft Word software when it fails to properly ha A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'.
nvd
CVE-2019-0953P3HIGHCVSS 7.8vunspecified2019-05-16
CVE-2019-0953 [HIGH] CVE-2019-0953: A remote code execution vulnerability exists in Microsoft Word software when it fails to properly ha A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'.
nvd
CVE-2021-40486P3HIGHCVSS 7.8≥ 16.0.1, < 16.0.10379.200002021-10-13
CVE-2021-40486 [HIGH] CVE-2021-40486: Microsoft Word Remote Code Execution Vulnerability Microsoft Word Remote Code Execution Vulnerability
nvd
Microsoft Office Online Server vulnerabilities | cvebase