Advisories · Technology
Microsoft Office Online Server.
Every CVE that names Microsoft Office Online Server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.8 High
Microsoft Excel Remote Code Execution Vulnerability
- Microsoft 365 Apps for Enterprise
- Microsoft Excel 2010 Service Pack 2
- CVSS 7.8 High
Microsoft Excel Remote Code Execution Vulnerability
- Microsoft 365 Apps for Enterprise
- Microsoft Excel 2010 Service Pack 2
- CVSS 5.5 Medium
Microsoft Excel Information Disclosure Vulnerability
- Microsoft 365 Apps for Enterprise
- Microsoft Excel 2010 Service Pack 2
- CVSS 7.8 High
Microsoft Excel Remote Code Execution Vulnerability
- Microsoft 365 Apps for Enterprise
- Microsoft Excel 2010 Service Pack 2
- CVSS 7.8 High
Microsoft Excel Remote Code Execution Vulnerability
- Microsoft 365 Apps for Enterprise
- Microsoft Excel 2010 Service Pack 2
- CVSS 7.8 High
Microsoft Excel Remote Code Execution Vulnerability
- Microsoft Office 2019
- Microsoft Office Online Server
- CVSS 7.8 High
Microsoft Excel Remote Code Execution Vulnerability
- Microsoft Office 2019
- Microsoft Office Online Server
- CVSS 7.8 High
Microsoft Excel Remote Code Execution Vulnerability
- Microsoft Office 2019
- Microsoft Office Online Server
- CVSS 7.8 High
Microsoft Excel Remote Code Execution Vulnerability
- Microsoft Office 2019
- Microsoft Office Online Server
- CVSS 7.8 High
Microsoft Excel Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
- Microsoft Office 2019
- CVSS 7.8 High
Microsoft Word Remote Code Execution Vulnerability
- Microsoft SharePoint Server 2019
- Microsoft Office 2019
- CVSS 7.8 High
Microsoft Excel Remote Code Execution Vulnerability
- Microsoft SharePoint Server 2019
- Microsoft Office 2019
- CVSS 5.5 Medium
Microsoft Excel Information Disclosure Vulnerability
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
- Microsoft Office 2019
- CVSS 7.8 High
Microsoft Word Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
- CVSS 8.8 High
Microsoft Word Information Disclosure Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
-
Microsoft Word Information Disclosure Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
-
Microsoft Word Information Disclosure Vulnerability
- Microsoft SharePoint Server 2019
- Microsoft Office 2019
-
Microsoft Excel Remote Code Execution Vulnerability
- Microsoft SharePoint Server 2010 Service Pack 2
- Microsoft Office Online Server
-
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'.
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
-
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'.
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
-
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'.
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
-
An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, aka 'Microsoft Office Information Disclosure Vulnerability'.
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
-
A spoofing vulnerability exists when an Office Web Apps server does not properly sanitize a specially crafted request, aka 'Office Web Apps XSS Vulnerability'.
- Microsoft Office Online Server
- Microsoft Office Web Apps
-
An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka 'Microsoft O…
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
-
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'.
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
-
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'.
- Microsoft SharePoint Foundation
- Microsoft SharePoint Enterprise Server
-
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'.
- Microsoft SharePoint Server
- Microsoft Office
-
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'.
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
-
Microsoft Office Online Server: A spoofing vulnerability exists when Office Online Server does not validate origin in…
- Microsoft Office Online Server
-
A spoofing vulnerability exists when Office Online does not validate origin in cross-origin communications correctly, aka 'Microsoft Office Online Spoofing Vulnerability'.
- Microsoft Office Online Server
-
A spoofing vulnerability exists when Office Online does not validate origin in cross-origin communications handlers correctly, aka 'Microsoft Office Online Spoofing Vulnerability'.
- Microsoft Office Online Server
-
Microsoft Excel: An information disclosure vulnerability exists when Microsoft Excel improperly discloses…
- Microsoft Excel
- Microsoft Office
-
A spoofing vulnerability exists when Office Online does not validate origin in cross-origin communications handlers correctly, aka 'Microsoft Office Online Spoofing Vulnerability'.
- Microsoft Office Online Server
-
Microsoft Excel: A remote code execution vulnerability exists in Microsoft Excel software when the…
- Microsoft Excel
- Microsoft Office
- CVSS 9.8 CriticalCritical · CVSS 9+
Microsoft Word Remote Code Execution Vulnerability
- Microsoft SharePoint Server 2019
- Microsoft Office 2019
-
Microsoft Word Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
-
Microsoft Word Remote Code Execution Vulnerability
- Microsoft SharePoint Server 2019
- Microsoft Office 2019
-
Microsoft Word Remote Code Execution Vulnerability
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
-
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'.
- Microsoft Office
- Microsoft Word
-
Microsoft Word: A remote code execution vulnerability exists in Microsoft Word software when it fails to…
- Microsoft Word
- Microsoft Office
-
Microsoft Office: A remote code execution vulnerability exists in Microsoft PowerPoint software when the…
- Microsoft Office
- Microsoft PowerPoint
-
Microsoft Office: An elevation of privilege vulnerability exists when Office Web Apps Server 2013 and…
- Microsoft Office
- Microsoft Office Online Server