Known vulnerabilities in Office Online Server - page 4
Vendor:
Microsoft
Software:
Office Online Server
Software CPE:
cpe:2.3:a:microsoft:office_online_server:*:*:*:*:*:*:*:*
Website:
https://www.microsoft.com
Total vulnerabilities:
225
Public exploits:
7
Known exploited (KEV):
1
Breakdown by Severity Chart
16.0.10417.20228
16.0.10417.20207
16.0.10417.20175
16.0.10417.20137
16.0.10417.20128
16.0.10417.20113
16.0.10417.20102
16.0.10417.20097
16.0.10417.20083
16.0.10417.20075
16.0.10417.20068
16.0.10417.20059
16.0.10417.20047
16.0.10417.20034
16.0.10417.20027
16.0.10417.20018
16.0.10417.20010
16.0.10417.20003
16.0.10416.20073
16.0.10416.20047
16.0.10416.20058
16.0.10402.20000
2016
1.0
Vulnerabilities (225)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU121287 - Use After Free CVE-2026-20950 |
CWE-416 | High | - | 13.01.2026 |
SB20260113102 |
||
| #VU121285 - Integer underflow CVE-2026-20957 |
CWE-191 | High | - | 13.01.2026 |
SB20260113102 |
||
| #VU119489 - Untrusted Pointer Dereference CVE-2025-62560 |
CWE-822 | High | - | 09.12.2025 |
SB2025120987 |
||
| #VU119488 - Untrusted Pointer Dereference CVE-2025-62556 |
CWE-822 | High | - | 09.12.2025 |
SB2025120987 |
||
| #VU119486 - Out-of-bounds read CVE-2025-62564 |
CWE-125 | High | - | 09.12.2025 |
SB2025120987 |
||
| #VU119485 - Use After Free CVE-2025-62563 |
CWE-416 | High | - | 09.12.2025 |
SB2025120987 |
||
| #VU119484 - Untrusted Pointer Dereference CVE-2025-62561 |
CWE-822 | High | - | 09.12.2025 |
SB2025120987 |
||
| #VU118329 - Out-of-bounds read CVE-2025-60726 |
CWE-125 | Medium | - | 11.11.2025 |
SB2025111191 |
||
| #VU118328 - Out-of-bounds read CVE-2025-60727 |
CWE-125 | High | - | 11.11.2025 |
SB2025111191 |
||
| #VU118325 - Heap-based Buffer Overflow CVE-2025-62201 |
CWE-122 | High | - | 11.11.2025 |
SB2025111191 |
||
| #VU118324 - Out-of-bounds read CVE-2025-62202 |
CWE-125 | Medium | - | 11.11.2025 |
SB2025111191 |
||
| #VU118323 - Use After Free CVE-2025-62203 |
CWE-416 | High | - | 11.11.2025 |
SB2025111191 |
||
| #VU118322 - Untrusted Pointer Dereference CVE-2025-62200 |
CWE-822 | High | - | 11.11.2025 |
SB2025111191 |
||
| #VU117259 - Type confusion CVE-2025-59231 |
CWE-843 | High | - | 15.10.2025 |
SB20251015108 |
||
| #VU117256 - Type confusion CVE-2025-59233 |
CWE-843 | High | - | 15.10.2025 |
SB20251015108 |
||
| #VU117249 - Out-of-bounds read CVE-2025-59235 |
CWE-125 | Medium | - | 15.10.2025 |
SB20251015108 |
||
| #VU117247 - Use After Free CVE-2025-59236 |
CWE-416 | High | - | 15.10.2025 |
SB20251015108 |
||
| #VU117245 - Use After Free CVE-2025-59223 |
CWE-416 | High | - | 15.10.2025 |
SB20251015108 |
||
| #VU117244 - Use After Free CVE-2025-59224 |
CWE-416 | High | - | 15.10.2025 |
SB20251015108 |
||
| #VU117241 - Out-of-bounds read CVE-2025-59232 |
CWE-125 | Medium | - | 15.10.2025 |
SB20251015108 |
Showing elements 61 - 80 out of 225