OO
Product
Office Online Server
On CISA KEVExploited in the wild
305
CVEs
1
On KEV
9.8
Max CVSS
44
New 30D
Severity mix
Critical 2High 249Medium 52Low 2
Watch
Add Office Online Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-1447 | 8.8 | Jul 14 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution… Affected: 1.0 |
| CVE-2020-1446 | 8.8 | Jul 14 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution… Affected: 1.0 |
| CVE-2020-0850 | 8.8 | Mar 12 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution… Affected: 1.0 |
| CVE-2019-1331 | 8.8 | Oct 10 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution… Affected: All versions, or not specified |
| CVE-2019-0585 | 8.8 | Jan 8 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Execution… Affected: All versions, or not specified |
| CVE-2018-0792 | 8.8 | Jan 10 | Microsoft Word 2016 in Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Word Remote Code Execution… Affected: 2016 |
| CVE-2017-8512 | 8.8 | Jun 15 | A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability" Affected: 2016 |
| CVE-2025-49697 | 8.4 | Jul 8 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally Affected: before 16.0.10417.20027 |
| CVE-2025-21362 | 8.4 | Jan 14 | Microsoft Excel Remote Code Execution Vulnerability Affected: before 16.0.10416.20047 |
| CVE-2026-44822 | 8.2 | Jun 9 | Microsoft Excel Information Disclosure Vulnerability Affected: 16.0.0.0 before 16.0.10417.20137 |
| CVE-2026-81956 | 7.8 | Sep 8 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.0.0 before 16.0.10417.20207 |
| CVE-2026-81947 | 7.8 | Sep 8 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.0.0 before 16.0.10417.20207 |
| CVE-2026-68817 | 7.8 | Aug 11 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.0.0 before 16.0.10417.20175 |
| CVE-2026-68814 | 7.8 | Aug 11 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.0.0 before 16.0.10417.20175 |
| CVE-2026-68812 | 7.8 | Aug 11 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.0.0 before 16.0.10417.20175 |
| CVE-2026-68805 | 7.8 | Aug 11 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.0.0 before 16.0.10417.20175 |
| CVE-2026-68804 | 7.8 | Aug 11 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.0.0 before 16.0.10417.20175 |
| CVE-2026-68803 | 7.8 | Aug 11 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.0.0 before 16.0.10417.20175 |
| CVE-2026-68801 | 7.8 | Aug 11 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.0.0 before 16.0.10417.20175 |
| CVE-2026-68816 | 7.8 | Aug 11 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.0.0 before 16.0.10417.20175 |
| CVE-2026-68815 | 7.8 | Aug 11 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.0.0 before 16.0.10417.20175 |
| CVE-2026-68811 | 7.8 | Aug 11 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.0.0 before 16.0.10417.20175 |
| CVE-2026-68810 | 7.8 | Aug 11 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.0.0 before 16.0.10417.20175 |
| CVE-2026-68806 | 7.8 | Aug 11 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.0.0 before 16.0.10417.20175 |
| CVE-2026-68807 | 7.8 | Aug 11 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.0.0 before 16.0.10417.20175 |
| CVE-2026-68796 | 7.8 | Aug 11 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.0.0 before 16.0.10417.20175 |
| CVE-2026-68795 | 7.8 | Aug 11 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.0.0 before 16.0.10417.20175 |
| CVE-2026-68794 | 7.8 | Aug 11 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.0.0 before 16.0.10417.20175 |
| CVE-2026-68793 | 7.8 | Aug 11 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.0.0 before 16.0.10417.20175 |
| CVE-2026-55949 | 7.8 | Jul 14 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.0.0 before 16.0.10417.20175 |
| CVE-2026-55947 | 7.8 | Jul 14 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.0.0 before 16.0.10417.20175 |
| CVE-2026-54131 | 7.8 | Jul 14 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.0.0 before 16.0.10417.20175 |
| CVE-2026-55128 | 7.8 | Jul 14 | Microsoft Word Remote Code Execution Vulnerability Affected: before 16.0.10417.20175 |
| CVE-2026-55131 | 7.8 | Jul 14 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.0.0 before 16.0.10417.20175 |
| CVE-2026-55053 | 7.8 | Jul 14 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.0.0 before 16.0.10417.20175 |
| CVE-2026-55137 | 7.8 | Jul 14 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.0.0 before 16.0.10417.20175 |
| CVE-2026-55058 | 7.8 | Jul 14 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.0.0 before 16.0.10417.20175 |
| CVE-2026-55037 | 7.8 | Jul 14 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.0.0 before 16.0.10417.20175 |
| CVE-2026-55044 | 7.8 | Jul 14 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.0.0 before 16.0.10417.20175 |
| CVE-2026-55036 | 7.8 | Jul 14 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.0.0 before 16.0.10417.20175 |
| CVE-2026-55141 | 7.8 | Jul 14 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.0.0 before 16.0.10417.20175 |
| CVE-2026-55136 | 7.8 | Jul 14 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.0.0 before 16.0.10417.20175 |
| CVE-2026-55127 | 7.8 | Jul 14 | Microsoft Word Remote Code Execution Vulnerability Affected: before 16.0.10417.20175 |
| CVE-2026-55041 | 7.8 | Jul 14 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.0.0 before 16.0.10417.20175 |
| CVE-2026-55039 | 7.8 | Jul 14 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.0.0 before 16.0.10417.20175 |
| CVE-2026-55029 | 7.8 | Jul 14 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.0.0 before 16.0.10417.20175 |
| CVE-2026-55048 | 7.8 | Jul 14 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.0.0 before 16.0.10417.20175 |
| CVE-2026-55031 | 7.8 | Jul 14 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.0.0 before 16.0.10417.20175 |
| CVE-2026-55025 | 7.8 | Jul 14 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.0.0 before 16.0.10417.20175 |
| CVE-2026-55024 | 7.8 | Jul 14 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.0.0 before 16.0.10417.20175 |