Msrc Microsoft Office Online Server vulnerabilities

86 known vulnerabilities affecting msrc/microsoft_office_online_server.

Total CVEs
86
CISA KEV
0
Public exploits
2
Exploited in wild
2
Severity breakdown
CRITICAL5HIGH66MEDIUM15

Vulnerabilities

Page 3 of 5
CVE-2021-28451HIGHCVSS 7.82021-04-13
CVE-2021-28451 [HIGH] Microsoft Excel Remote Code Execution Vulnerability Microsoft Excel Remote Code Execution Vulnerability FAQ: Is the Preview Pane an attack vector for this vulnerability? No, the Preview Pane is not an attack vector. FAQ: According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do? Exploitation of the vulnerability requires that a user open a specially crafted file with an affected version of Microsoft Excel. In an email a
msrc
CVE-2021-28453HIGHCVSS 7.82021-04-13
CVE-2021-28453 [HIGH] Microsoft Word Remote Code Execution Vulnerability Microsoft Word Remote Code Execution Vulnerability FAQ: Is the Preview Pane an attack vector for this vulnerability? No, the Preview Pane is not an attack vector. Microsoft Office Word: Microsoft Office Word Microsoft: Microsoft Impact: Remote Code Execution Exploit Status: Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A Refere
msrc
CVE-2021-28456MEDIUMCVSS 5.52021-04-13
CVE-2021-28456 [MEDIUM] Microsoft Excel Information Disclosure Vulnerability Microsoft Excel Information Disclosure Vulnerability FAQ: Is the Preview Pane an attack vector for this vulnerability? No, the Preview Pane is not an attack vector. FAQ: What type of information could be disclosed by this vulnerability? The type of information that could be disclosed if an attacker successfully exploited this vulnerability is sensitive information. FAQ: According to the CVSS metric, user interaction
msrc
CVE-2021-27054HIGHCVSS 7.82021-03-09
CVE-2021-27054 [HIGH] Microsoft Excel Remote Code Execution Vulnerability Microsoft Excel Remote Code Execution Vulnerability FAQ: Is the Preview Pane an attack vector for this vulnerability? No, the Preview Pane is not an attack vector. FAQ: Are the updates for the Microsoft Office 2019 for Mac currently available? The security update for Microsoft Office 2019 for Mac is not immediately available. The update will be released as soon as possible, and when it is available, customers will be not
msrc
CVE-2021-27053HIGHCVSS 7.82021-03-09
CVE-2021-27053 [HIGH] Microsoft Excel Remote Code Execution Vulnerability Microsoft Excel Remote Code Execution Vulnerability FAQ: Is the Preview Pane an attack vector for this vulnerability? No, the Preview Pane is not an attack vector. FAQ: Are the updates for the Microsoft Office 2019 for Mac currently available? The security update for Microsoft Office 2019 for Mac is not immediately available. The update will be released as soon as possible, and when it is available, customers will be not
msrc
CVE-2021-27057HIGHCVSS 7.82021-03-09
CVE-2021-27057 [HIGH] Microsoft Office Remote Code Execution Vulnerability Microsoft Office Remote Code Execution Vulnerability FAQ: Is the Preview Pane an attack vector for this vulnerability? No, the Preview Pane is not an attack vector. FAQ: According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do? A user needs to be tricked into running malicious files. FAQ: Are the updates for the Microsoft Office 2019 for Mac currently available? The
msrc
CVE-2021-24067HIGHCVSS 7.82021-02-09
CVE-2021-24067 [HIGH] Microsoft Excel Remote Code Execution Vulnerability Microsoft Excel Remote Code Execution Vulnerability FAQ: Is the Preview Pane an attack vector for this vulnerability? No, the Preview Pane is not an attack vector. FAQ: Are the updates for the Microsoft Office 2019 for Mac currently available? The security update for Microsoft Office 2019 for Mac is not immediately available. The update will be released as soon as possible, and when it is available, customers will be not
msrc
CVE-2021-1715HIGHCVSS 7.82021-01-12
CVE-2021-1715 [HIGH] Microsoft Word Remote Code Execution Vulnerability Microsoft Word Remote Code Execution Vulnerability FAQ: Is the Preview Pane an attack vector for this vulnerability? No, the Preview Pane is not an attack vector. Microsoft Office: Microsoft Office Microsoft: Microsoft Customer Action Required: Yes Impact: Remote Code Execution Exploit Status: Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Li
msrc
CVE-2021-1716HIGHCVSS 7.82021-01-12
CVE-2021-1716 [HIGH] Microsoft Word Remote Code Execution Vulnerability Microsoft Word Remote Code Execution Vulnerability FAQ: Is the Preview Pane an attack vector for this vulnerability? No, the Preview Pane is not an attack vector. Microsoft Office: Microsoft Office Microsoft: Microsoft Customer Action Required: Yes Impact: Remote Code Execution Exploit Status: Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Li
msrc
CVE-2021-1713HIGHCVSS 7.82021-01-12
CVE-2021-1713 [HIGH] Microsoft Excel Remote Code Execution Vulnerability Microsoft Excel Remote Code Execution Vulnerability FAQ: Is the Preview Pane an attack vector for this vulnerability? No, the Preview Pane is not an attack vector. Microsoft Office: Microsoft Office Microsoft: Microsoft Customer Action Required: Yes Impact: Remote Code Execution Exploit Status: Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less
msrc
CVE-2021-1714HIGHCVSS 7.82021-01-12
CVE-2021-1714 [HIGH] Microsoft Excel Remote Code Execution Vulnerability Microsoft Excel Remote Code Execution Vulnerability FAQ: Is the Preview Pane an attack vector for this vulnerability? No, the Preview Pane is not an attack vector. Microsoft Office: Microsoft Office Microsoft: Microsoft Customer Action Required: Yes Impact: Remote Code Execution Exploit Status: Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less
msrc
CVE-2020-17128HIGHCVSS 7.82020-12-08
CVE-2020-17128 [HIGH] Microsoft Excel Remote Code Execution Vulnerability Microsoft Excel Remote Code Execution Vulnerability FAQ: Is the Preview Pane an attack vector for this vulnerability? No, the Preview Pane is not an attack vector. FAQ: Are the updates for the Microsoft Office 2019 for Mac currently available? The security update for Microsoft Office 2019 for Mac is not immediately available. The update will be released as soon as possible, and when it is available, customers will be not
msrc
CVE-2020-17125HIGHCVSS 7.82020-12-08
CVE-2020-17125 [HIGH] Microsoft Excel Remote Code Execution Vulnerability Microsoft Excel Remote Code Execution Vulnerability FAQ: Is the Preview Pane an attack vector for this vulnerability? No, the Preview Pane is not an attack vector. Microsoft Office: Microsoft Office Microsoft: Microsoft Customer Action Required: Yes Impact: Remote Code Execution Exploit Status: Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less
msrc
CVE-2020-17129HIGHCVSS 7.82020-12-08
CVE-2020-17129 [HIGH] Microsoft Excel Remote Code Execution Vulnerability Microsoft Excel Remote Code Execution Vulnerability FAQ: Is the Preview Pane an attack vector for this vulnerability? No, the Preview Pane is not an attack vector. Microsoft Office: Microsoft Office Microsoft: Microsoft Customer Action Required: Yes Impact: Remote Code Execution Exploit Status: Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less
msrc
CVE-2020-17126MEDIUMCVSS 5.52020-12-08
CVE-2020-17126 [MEDIUM] Microsoft Excel Information Disclosure Vulnerability Microsoft Excel Information Disclosure Vulnerability FAQ: Is the Preview Pane an attack vector for this vulnerability? No, the Preview Pane is not an attack vector. FAQ: What type of information could be disclosed by this vulnerability? The type of information that could be disclosed if an attacker successfully exploited this vulnerability is uninitialized memory. FAQ: Are the updates for the Microsoft Office 2019 fo
msrc
CVE-2020-17064HIGHCVSS 7.82020-11-10
CVE-2020-17064 [HIGH] Microsoft Excel Remote Code Execution Vulnerability Microsoft Excel Remote Code Execution Vulnerability FAQ: Is the Preview Pane an attack vector for this vulnerability? No, the Preview Pane is not an attack vector. Microsoft Office: Microsoft Office Microsoft: Microsoft Customer Action Required: Yes Impact: Remote Code Execution Exploit Status: Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less
msrc
CVE-2020-17065HIGHCVSS 7.82020-11-10
CVE-2020-17065 [HIGH] Microsoft Excel Remote Code Execution Vulnerability Microsoft Excel Remote Code Execution Vulnerability FAQ: Is the Preview Pane an attack vector for this vulnerability? No, the Preview Pane is not an attack vector. Microsoft Office: Microsoft Office Microsoft: Microsoft Customer Action Required: Yes Impact: Remote Code Execution Exploit Status: Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less
msrc
CVE-2020-16932HIGHCVSS 7.82020-10-13
CVE-2020-16932 [HIGH] Microsoft Excel Remote Code Execution Vulnerability Microsoft Excel Remote Code Execution Vulnerability Description: A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the aff
msrc
CVE-2020-16929HIGHCVSS 7.82020-10-13
CVE-2020-16929 [HIGH] Microsoft Excel Remote Code Execution Vulnerability Microsoft Excel Remote Code Execution Vulnerability Description: A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the aff
msrc
CVE-2020-16931HIGHCVSS 7.82020-10-13
CVE-2020-16931 [HIGH] Microsoft Excel Remote Code Execution Vulnerability Microsoft Excel Remote Code Execution Vulnerability Description: A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the aff
msrc
Msrc Microsoft Office Online Server vulnerabilities | cvebase