OO
Product
Office Online Server
On CISA KEVExploited in the wild
305
CVEs
1
On KEV
9.8
Max CVSS
44
New 30D
Severity mix
Critical 2High 249Medium 52Low 2
Watch
Add Office Online Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-49711 | 7.8 | Jul 8 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally Affected: before 16.0.10417.20027 |
| CVE-2025-47165 | 7.8 | Jun 10 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally Affected: before 16.0.10417.20018 |
| CVE-2025-30383 | 7.8 | May 13 | Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally Affected: before 16.0.10417.20010 |
| CVE-2025-30381 | 7.8 | May 13 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally Affected: before 16.0.10417.20010 |
| CVE-2025-30379 | 7.8 | May 13 | Release of invalid pointer or reference in Microsoft Office Excel allows an unauthorized attacker to execute code locally Affected: before 16.0.10417.20010 |
| CVE-2025-30377 | 7.8 | May 13 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally Affected: before 16.0.10417.20010 |
| CVE-2025-30376 | 7.8 | May 13 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally Affected: before 16.0.10417.20010 |
| CVE-2025-30375 | 7.8 | May 13 | Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally Affected: before 16.0.10417.20010 |
| CVE-2025-29979 | 7.8 | May 13 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally Affected: before 16.0.10417.20010 |
| CVE-2025-29977 | 7.8 | May 13 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally Affected: before 16.0.10417.20010 |
| CVE-2025-27751 | 7.8 | Apr 8 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally Affected: All versions, or not specified |
| CVE-2025-27746 | 7.8 | Apr 8 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally Affected: All versions, or not specified |
| CVE-2025-26642 | 7.8 | Apr 8 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally Affected: All versions, or not specified |
| CVE-2025-24082 | 7.8 | Mar 11 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally Affected: All versions, or not specified |
| CVE-2025-24081 | 7.8 | Mar 11 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally Affected: All versions, or not specified |
| CVE-2025-24075 | 7.8 | Mar 11 | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally Affected: All versions, or not specified |
| CVE-2025-21394 | 7.8 | Feb 11 | Microsoft Excel Remote Code Execution Vulnerability Affected: before 16.0.10416.20058 |
| CVE-2025-21390 | 7.8 | Feb 11 | Microsoft Excel Remote Code Execution Vulnerability Affected: before 16.0.10416.20058 |
| CVE-2025-21387 | 7.8 | Feb 11 | Microsoft Excel Remote Code Execution Vulnerability Affected: before 16.0.10416.20058 |
| CVE-2025-21386 | 7.8 | Feb 11 | Microsoft Excel Remote Code Execution Vulnerability Affected: before 16.0.10416.20058 |
| CVE-2025-21381 | 7.8 | Feb 11 | Microsoft Excel Remote Code Execution Vulnerability Affected: before 16.0.10416.20058 |
| CVE-2025-21354 | 7.8 | Jan 14 | Microsoft Excel Remote Code Execution Vulnerability Affected: before 16.0.10416.20047 |
| CVE-2024-49026 | 7.8 | Nov 12 | Microsoft Excel Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2024-43465 | 7.8 | Sep 10 | Microsoft Excel Elevation of Privilege Vulnerability Affected: before 16.0.10414.20000 |
| CVE-2024-30042 | 7.8 | May 14 | Microsoft Excel Remote Code Execution Vulnerability Affected: before 16.0.10410.20003; 2016 |
| CVE-2023-36896 | 7.8 | Aug 8 | Microsoft Excel Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2023-35371 | 7.8 | Aug 8 | Microsoft Office Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2023-33137 | 7.8 | Jun 14 | Microsoft Excel Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2023-33133 | 7.8 | Jun 14 | Microsoft Excel Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2023-32029 | 7.8 | Jun 14 | Microsoft Excel Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2023-24953 | 7.8 | May 9 | Microsoft Excel Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2023-23399 | 7.8 | Mar 14 | Microsoft Excel Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-41063 | 7.8 | Nov 9 | Microsoft Excel Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-41061 | 7.8 | Nov 9 | Microsoft Word Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-33648 | 7.8 | Aug 9 | Microsoft Excel Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-29109 | 7.8 | May 10 | Microsoft Excel Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-26901 | 7.8 | Apr 15 | Microsoft Excel Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2021-43256 | 7.8 | Dec 15 | Microsoft Excel Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2021-40442 | 7.8 | Nov 10 | Microsoft Excel Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2021-40486 | 7.8 | Oct 13 | Microsoft Word Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2021-40485 | 7.8 | Oct 13 | Microsoft Excel Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2021-40474 | 7.8 | Oct 13 | Microsoft Excel Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2021-38655 | 7.8 | Sep 15 | Microsoft Excel Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2021-34501 | 7.8 | Jul 14 | Microsoft Excel Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2021-31939 | 7.8 | Jun 8 | Microsoft Excel Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2021-31179 | 7.8 | May 11 | Microsoft Office Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2021-31177 | 7.8 | May 11 | Microsoft Office Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2021-31176 | 7.8 | May 11 | Microsoft Office Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2021-31175 | 7.8 | May 11 | Microsoft Office Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2021-28454 | 7.8 | Apr 13 | Microsoft Excel Remote Code Execution Vulnerability Affected: All versions, or not specified |