Known vulnerabilities in Office Online Server - page 3

Vendor: Microsoft
Software: Office Online Server
Software CPE: cpe:2.3:a:microsoft:office_online_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 222
Public exploits: 7
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Office Online Server Office Online Server is affected by 222 known vulnerabilities: 1 critical, 170 high, 31 medium, 20 low Critical High Medium Low

Vulnerabilities (222)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU134209 - Integer underflow
CVE-2026-44823		 CWE-191 High
No
No
 - 10.06.2026 SB2026061046
#VU134208 - Integer underflow
CVE-2026-44820		 CWE-191 High
No
No
 - 10.06.2026 SB2026061046
#VU134207 - Integer underflow
CVE-2026-44818		 CWE-191 High
No
No
 - 10.06.2026 SB2026061046
#VU134206 - Integer underflow
CVE-2026-44817		 CWE-191 High
No
No
 - 10.06.2026 SB2026061046
#VU131338 - Use After Free
CVE-2026-40359		 CWE-416 High
No
No
 - 13.05.2026 SB2026051364
#VU131336 - Out-of-bounds read
CVE-2026-40360		 CWE-125 Medium
No
No
 - 13.05.2026 SB2026051364
#VU131335 - Heap-based Buffer Overflow
CVE-2026-40362		 CWE-122 High
No
No
 - 13.05.2026 SB2026051364
#VU126259 - Use After Free
CVE-2026-32199		 CWE-416 High
No
No
 - 16.04.2026 SB2026041615
#VU126258 - Use After Free
CVE-2026-32198		 CWE-416 High
No
No
 - 16.04.2026 SB2026041615
#VU126257 - Use After Free
CVE-2026-32197		 CWE-416 High
No
No
 - 16.04.2026 SB2026041615
#VU126256 - Use After Free
CVE-2026-32189		 CWE-416 High
No
No
 - 16.04.2026 SB2026041615
#VU126255 - Out-of-bounds read
CVE-2026-32188		 CWE-125 Medium
No
No
 - 16.04.2026 SB2026041615
#VU123802 - Use After Free
CVE-2026-26107		 CWE-416 High
No
No
 16.0.10417.20102 11.03.2026 SB2026031105
#VU123799 - Heap-based Buffer Overflow
CVE-2026-26108		 CWE-122 High
No
No
 16.0.10417.20102 11.03.2026 SB2026031105
#VU123796 - Out-of-bounds read
CVE-2026-26109		 CWE-125 High
No
No
 16.0.10417.20102 11.03.2026 SB2026031105
#VU123788 - Untrusted Pointer Dereference
CVE-2026-26112		 CWE-822 High
No
No
 16.0.10417.20102 11.03.2026 SB2026031105
#VU122585 - Out-of-bounds read
CVE-2026-21261		 CWE-125 Medium
No
No
 - 10.02.2026 SB2026021092
#VU122584 - Out-of-bounds read
CVE-2026-21258		 CWE-125 Medium
No
No
 - 10.02.2026 SB2026021092
#VU122583 - Heap-based Buffer Overflow
CVE-2026-21259		 CWE-122 High
No
No
 - 10.02.2026 SB2026021092
#VU121282 - Untrusted Pointer Dereference
CVE-2026-20955		 CWE-822 High
No
No
 - 13.01.2026 SB20260113102


Showing elements 41 - 60 out of 222