Known vulnerabilities in Office Online Server - page 6

Vendor: Microsoft
Software: Office Online Server
Software CPE: cpe:2.3:a:microsoft:office_online_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 222
Public exploits: 7
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Office Online Server Office Online Server is affected by 222 known vulnerabilities: 1 critical, 170 high, 31 medium, 20 low Critical High Medium Low

Vulnerabilities (222)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU109086 - Release of invalid pointer or reference
CVE-2025-30379		 CWE-763 High
No
No
 - 13.05.2025 SB2025051392
#VU109084 - Use After Free
CVE-2025-29977		 CWE-416 High
No
No
 - 13.05.2025 SB2025051392
#VU107301 - Use After Free
CVE-2025-27751		 CWE-416 High
No
No
 - 09.04.2025 SB2025040964
#VU107214 - Use After Free
CVE-2025-27746		 CWE-416 High
No
No
 - 08.04.2025 SB2025040874
#VU107211 - Integer overflow
CVE-2025-26642		 CWE-190 High
No
No
 - 08.04.2025 SB2025040874
#VU105550 - Use After Free
CVE-2025-24082		 CWE-416 High
No
No
 - 11.03.2025 SB2025031184
#VU105549 - Stack-based buffer overflow
CVE-2025-24075		 CWE-121 High
No
No
 - 11.03.2025 SB2025031184
#VU105547 - Use After Free
CVE-2025-24081		 CWE-416 High
No
No
 - 11.03.2025 SB2025031184
#VU103811 - Use After Free
CVE-2025-21387		 CWE-416 High
No
No
 - 11.02.2025 SB20250211114
#VU103810 - Heap-based Buffer Overflow
CVE-2025-21390		 CWE-122 High
No
No
 - 11.02.2025 SB20250211114
#VU103808 - Use After Free
CVE-2025-21394		 CWE-416 High
No
No
 - 11.02.2025 SB20250211114
#VU103807 - Untrusted Pointer Dereference
CVE-2025-21381		 CWE-822 High
No
No
 - 11.02.2025 SB20250211114
#VU103806 - Use After Free
CVE-2025-21386		 CWE-416 High
No
No
 - 11.02.2025 SB20250211114
#VU102798 - Untrusted Pointer Dereference
CVE-2025-21354		 CWE-822 High
No
No
 - 15.01.2025 SB2025011544
#VU102797 - Use After Free
CVE-2025-21362		 CWE-416 High
No
No
 - 15.01.2025 SB2025011544
#VU100322 - Command injection
CVE-2024-49026		 CWE-77 High
No
No
 - 12.11.2024 SB20241112117
#VU97097 - Use After Free
CVE-2024-43465		 CWE-416 High
No
No
 - 10.09.2024 SB20240910135
#VU89487 - Deserialization of Untrusted Data
CVE-2024-30042		 CWE-502 High
No
No
 - 14.05.2024 SB2024051467
#VU80726 - Exposure of sensitive information to an unauthorized actor
CVE-2023-36766		 CWE-200 Medium
No
No
 16.0.10402.20000 13.09.2023 SB2023091319
#VU79179 - Improper input validation
CVE-2023-36896		 CWE-20 High
No
No
 - 08.08.2023 SB2023080882


Showing elements 101 - 120 out of 222