Known vulnerabilities in Office Online Server - page 5

Vendor: Microsoft
Software: Office Online Server
Software CPE: cpe:2.3:a:microsoft:office_online_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 222
Public exploits: 7
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Office Online Server Office Online Server is affected by 222 known vulnerabilities: 1 critical, 170 high, 31 medium, 20 low Critical High Medium Low

Vulnerabilities (222)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU117243 - Use After Free
CVE-2025-59225		 CWE-416 High
No
No
 - 15.10.2025 SB20251015108
#VU115121 - Use After Free
CVE-2025-54896		 CWE-416 High
No
No
 - 10.09.2025 SB2025091009
#VU115120 - Out-of-bounds read
CVE-2025-54898		 CWE-125 High
No
No
 - 10.09.2025 SB2025091009
#VU115118 - Out-of-bounds read
CVE-2025-54902		 CWE-125 High
No
No
 - 10.09.2025 SB2025091009
#VU115117 - Use After Free
CVE-2025-54903		 CWE-416 High
No
No
 - 10.09.2025 SB2025091009
#VU115116 - Use After Free
CVE-2025-54904		 CWE-416 High
No
No
 - 10.09.2025 SB2025091009
#VU115115 - Heap-based Buffer Overflow
CVE-2025-54900		 CWE-122 High
No
No
 - 10.09.2025 SB2025091009
#VU114050 - Type confusion
CVE-2025-53739		 CWE-843 High
No
No
 - 13.08.2025 SB2025081399
#VU114049 - Heap-based Buffer Overflow
CVE-2025-53737		 CWE-122 High
No
No
 - 13.08.2025 SB2025081399
#VU114048 - Use After Free
CVE-2025-53735		 CWE-416 High
No
No
 - 13.08.2025 SB2025081399
#VU114047 - Use of Uninitialized Resource
CVE-2025-53759		 CWE-908 High
No
No
 - 13.08.2025 SB2025081399
#VU112698 - Out-of-bounds read
CVE-2025-48812		 CWE-125 Medium
No
No
 - 09.07.2025 SB20250709111
#VU112697 - Use After Free
CVE-2025-49711		 CWE-416 High
No
No
 - 09.07.2025 SB20250709111
#VU112695 - Heap-based Buffer Overflow
CVE-2025-49697		 CWE-122 High
No
No
 - 09.07.2025 SB20250709110
#VU110758 - Use After Free
CVE-2025-47165		 CWE-416 High
No
No
 - 10.06.2025 SB2025061099
#VU109091 - Heap-based Buffer Overflow
CVE-2025-30376		 CWE-122 High
No
No
 - 13.05.2025 SB2025051392
#VU109090 - Type confusion
CVE-2025-30375		 CWE-843 High
No
No
 - 13.05.2025 SB2025051392
#VU109089 - Type confusion
CVE-2025-30383		 CWE-843 High
No
No
 - 13.05.2025 SB2025051392
#VU109088 - Heap-based Buffer Overflow
CVE-2025-29979		 CWE-122 High
No
No
 - 13.05.2025 SB2025051392
#VU109087 - Untrusted Pointer Dereference
CVE-2025-30381		 CWE-822 High
No
No
 - 13.05.2025 SB2025051392


Showing elements 81 - 100 out of 222