Known vulnerabilities in Office Online Server - page 5

Vendor: Microsoft
Software: Office Online Server
Software CPE: cpe:2.3:a:microsoft:office_online_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 218
Public exploits: 7
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Office Online Server Office Online Server is affected by 218 known vulnerabilities: 1 critical, 168 high, 29 medium, 20 low Critical High Medium Low

Vulnerabilities (218)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU115117 - Use After Free
CVE-2025-54903		 CWE-416 High
No
No
 - 10.09.2025 -
#VU115116 - Use After Free
CVE-2025-54904		 CWE-416 High
No
No
 - 10.09.2025 -
#VU115115 - Heap-based Buffer Overflow
CVE-2025-54900		 CWE-122 High
No
No
 - 10.09.2025 -
#VU114050 - Type confusion
CVE-2025-53739		 CWE-843 High
No
No
 - 13.08.2025 -
#VU114049 - Heap-based Buffer Overflow
CVE-2025-53737		 CWE-122 High
No
No
 - 13.08.2025 -
#VU114048 - Use After Free
CVE-2025-53735		 CWE-416 High
No
No
 - 13.08.2025 -
#VU114047 - Use of Uninitialized Resource
CVE-2025-53759		 CWE-908 High
No
No
 - 13.08.2025 -
#VU112698 - Out-of-bounds read
CVE-2025-48812		 CWE-125 Medium
No
No
 - 09.07.2025 -
#VU112697 - Use After Free
CVE-2025-49711		 CWE-416 High
No
No
 - 09.07.2025 -
#VU112695 - Heap-based Buffer Overflow
CVE-2025-49697		 CWE-122 High
No
No
 - 09.07.2025 -
#VU110758 - Use After Free
CVE-2025-47165		 CWE-416 High
No
No
 - 10.06.2025 -
#VU109091 - Heap-based Buffer Overflow
CVE-2025-30376		 CWE-122 High
No
No
 - 13.05.2025 -
#VU109090 - Type confusion
CVE-2025-30375		 CWE-843 High
No
No
 - 13.05.2025 -
#VU109089 - Type confusion
CVE-2025-30383		 CWE-843 High
No
No
 - 13.05.2025 -
#VU109088 - Heap-based Buffer Overflow
CVE-2025-29979		 CWE-122 High
No
No
 - 13.05.2025 -
#VU109087 - Untrusted Pointer Dereference
CVE-2025-30381		 CWE-822 High
No
No
 - 13.05.2025 -
#VU109086 - Release of invalid pointer or reference
CVE-2025-30379		 CWE-763 High
No
No
 - 13.05.2025 -
#VU109084 - Use After Free
CVE-2025-29977		 CWE-416 High
No
No
 - 13.05.2025 -
#VU107301 - Use After Free
CVE-2025-27751		 CWE-416 High
No
No
 - 09.04.2025 -
#VU107214 - Use After Free
CVE-2025-27746		 CWE-416 High
No
No
 - 08.04.2025 -


Showing elements 81 - 100 out of 218