Microsoft Office Online Server vulnerabilities

CVE-2026-97780 [HIGH] CWE-122 CVE-2026-97780: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97765 [HIGH] CWE-122 CVE-2026-97765: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97776 [HIGH] CWE-122 CVE-2026-97776: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97753 [HIGH] CWE-122 CVE-2026-97753: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97766 [HIGH] CWE-122 CVE-2026-97766: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97003 [HIGH] CWE-122 CVE-2026-97003: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97754 [HIGH] CWE-122 CVE-2026-97754: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2019-1327 [HIGH] CVE-2019-1327: A remote code execution vulnerability exists in Microsoft Excel software when the software fails to A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1331.

CVE-2026-100212 [HIGH] CWE-416 CVE-2026-100212: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a netw Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97738 [HIGH] CWE-416 CVE-2026-97738: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a netw Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97746 [HIGH] CWE-191 CVE-2026-97746: Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97762 [HIGH] CWE-787 CVE-2026-97762: Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code over a Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97775 [HIGH] CWE-400 CVE-2026-97775: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a netw Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97010 [HIGH] CWE-416 CVE-2026-97010: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a netw Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97772 [HIGH] CWE-415 CVE-2026-97772: Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97739 [HIGH] CWE-122 CVE-2026-97739: Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-65807 [HIGH] CWE-843 CVE-2026-65807: Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an un Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97017 [HIGH] CWE-416 CVE-2026-97017: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a netw Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97747 [HIGH] CWE-416 CVE-2026-97747: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a netw Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97752 [HIGH] CWE-416 CVE-2026-97752: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a netw Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.