Known vulnerabilities in Office Online Server - page 2

Vendor: Microsoft
Software: Office Online Server
Software CPE: cpe:2.3:a:microsoft:office_online_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 222
Public exploits: 7
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Office Online Server Office Online Server is affected by 222 known vulnerabilities: 1 critical, 170 high, 31 medium, 20 low Critical High Medium Low

Vulnerabilities (222)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU138249 - Use of Uninitialized Resource
CVE-2026-55949		 CWE-908 High
No
No
 16.0.10417.20175 17.07.2026 SB2026071713
#VU138248 - Heap-based Buffer Overflow
CVE-2026-55947		 CWE-122 High
No
No
 16.0.10417.20175 17.07.2026 SB2026071713
#VU138247 - Out-of-bounds read
CVE-2026-55898		 CWE-125 Low
No
No
 16.0.10417.20175 17.07.2026 SB2026071713
#VU138246 - Use After Free
CVE-2026-54131		 CWE-416 High
No
No
 16.0.10417.20175 17.07.2026 SB2026071713
#VU138233 - Heap-based Buffer Overflow
CVE-2026-55131		 CWE-122 High
No
No
 16.0.10417.20175 17.07.2026 SB2026071713
#VU138231 - Out-of-bounds read
CVE-2026-55122		 CWE-125 Low
No
No
 16.0.10417.20175 17.07.2026 SB2026071713
#VU138214 - Untrusted Pointer Dereference
CVE-2026-55138		 CWE-822 Low
No
No
 16.0.10417.20175 17.07.2026 SB2026071713
#VU138213 - Heap-based Buffer Overflow
CVE-2026-55041		 CWE-122 High
No
No
 16.0.10417.20175 17.07.2026 SB2026071713
#VU138207 - Integer underflow
CVE-2026-55039		 CWE-191 High
No
No
 16.0.10417.20175 17.07.2026 SB2026071713
#VU138204 - Heap-based Buffer Overflow
CVE-2026-55029		 CWE-122 High
No
No
 16.0.10417.20175 17.07.2026 SB2026071713
#VU138202 - Integer overflow
CVE-2026-55048		 CWE-190 High
No
No
 16.0.10417.20175 17.07.2026 SB2026071713
#VU138200 - Out-of-bounds read
CVE-2026-55031		 CWE-125 High
No
No
 16.0.10417.20175 17.07.2026 SB2026071713
#VU138198 - Type confusion
CVE-2026-55025		 CWE-843 High
No
No
 16.0.10417.20175 17.07.2026 SB2026071713
#VU138195 - Out-of-bounds read
CVE-2026-55046		 CWE-125 Low
No
No
 16.0.10417.20175 17.07.2026 SB2026071713
#VU138193 - Out-of-bounds read
CVE-2026-50408		 CWE-125 Low
No
No
 16.0.10417.20175 17.07.2026 SB2026071713
#VU138192 - Type confusion
CVE-2026-55024		 CWE-843 High
No
No
 16.0.10417.20175 17.07.2026 SB2026071713
#VU138187 - Untrusted Pointer Dereference
CVE-2026-48580		 CWE-822 Low
No
No
 16.0.10417.20175 17.07.2026 SB2026071713
#VU134211 - Out-of-bounds read
CVE-2026-45455		 CWE-125 Medium
No
No
 - 10.06.2026 SB2026061046
#VU134210 - Out-of-bounds read
CVE-2026-44822		 CWE-125 Medium
No
No
 - 10.06.2026 SB2026061046
#VU134205 - Integer underflow
CVE-2026-45469		 CWE-191 High
No
No
 - 10.06.2026 SB2026061046


Showing elements 21 - 40 out of 222