OO
Product
Office Online Server
by Microsoft · last CVE Oct 15, 2026
On CISA KEVExploited in the wild
305
CVEs
1
On KEV
9.8
Max CVSS
44
New 30D
Severity mix
Critical 2High 249Medium 52Low 2
Watch

Add Office Online Server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-44818
7.0
0%
Jun 9
Microsoft Excel Remote Code Execution Vulnerability
Affected: 16.0.0.0 before 16.0.10417.20137
CVE-2026-97760
6.5
1%
Oct 13
Microsoft Office Excel Information Disclosure Vulnerability
Affected: 16.0.0.0 before 16.0.10417.20228
CVE-2026-97779
6.5
1%
Oct 13
Microsoft Office Excel Information Disclosure Vulnerability
Affected: 16.0.0.0 before 16.0.10417.20228
CVE-2026-97740
6.5
1%
Oct 13
Microsoft Office Excel Information Disclosure Vulnerability
Affected: 16.0.0.0 before 16.0.10417.20228
CVE-2026-70328
6.5
1%
Aug 11
Microsoft Excel Information Disclosure Vulnerability
Affected: 16.0.0.0 before 16.0.10417.20175
CVE-2026-70327
6.5
1%
Aug 11
Microsoft Excel Information Disclosure Vulnerability
Affected: 16.0.0.0 before 16.0.10417.20175
CVE-2026-55054
6.5
1%
Jul 14
Microsoft Excel Information Disclosure Vulnerability
Affected: 16.0.0.0 before 16.0.10417.20175
CVE-2023-23396
6.5
4%
Mar 14
Microsoft Excel Denial of Service Vulnerability
Affected: All versions, or not specified
CVE-2026-54988
6.1
0%
Jul 14
Microsoft Excel Information Disclosure Vulnerability
Affected: 16.0.0.0 before 16.0.10417.20175
CVE-2020-1442
6.1
2%
Jul 14
A spoofing vulnerability exists when an Office Web Apps server does not properly sanitize a specially crafted request, aka 'Office Web Apps XSS Vulnerability'
Affected: All versions, or not specified
CVE-2026-81401
5.5
1%
Sep 8
Microsoft Excel Information Disclosure Vulnerability
Affected: 16.0.0.0 before 16.0.10417.20207
CVE-2026-81390
5.5
1%
Sep 8
Microsoft Excel Information Disclosure Vulnerability
Affected: 16.0.0.0 before 16.0.10417.20207
CVE-2026-68799
5.5
1%
Aug 11
Microsoft Excel Information Disclosure Vulnerability
Affected: 16.0.0.0 before 16.0.10417.20175
CVE-2026-68797
5.5
1%
Aug 11
Microsoft Excel Information Disclosure Vulnerability
Affected: 16.0.0.0 before 16.0.10417.20175
CVE-2026-68808
5.5
1%
Aug 11
Microsoft Excel Information Disclosure Vulnerability
Affected: 16.0.0.0 before 16.0.10417.20175
CVE-2026-68802
5.5
1%
Aug 11
Microsoft Excel Information Disclosure Vulnerability
Affected: 16.0.0.0 before 16.0.10417.20175
CVE-2026-55124
5.5
1%
Jul 14
Microsoft Word Information Disclosure Vulnerability
Affected: before 16.0.10417.20175
CVE-2026-55138
5.5
1%
Jul 14
Microsoft Excel Information Disclosure Vulnerability
Affected: 16.0.0.0 before 16.0.10417.20175
CVE-2026-55050
5.5
1%
Jul 14
Microsoft Word Information Disclosure Vulnerability
Affected: before 16.0.10417.20175
CVE-2026-55047
5.5
1%
Jul 14
Microsoft Office Information Disclosure Vulnerability
Affected: before 16.0.10417.20175
CVE-2026-55046
5.5
1%
Jul 14
Microsoft Excel Information Disclosure Vulnerability
Affected: 16.0.0.0 before 16.0.10417.20175
CVE-2026-50408
5.5
1%
Jul 14
Microsoft Excel Information Disclosure Vulnerability
Affected: 16.0.0.0 before 16.0.10417.20175
CVE-2026-48580
5.5
1%
Jul 14
Microsoft Excel Information Disclosure Vulnerability
Affected: 16.0.0.0 before 16.0.10417.20175
CVE-2026-21261
5.5
1%
Feb 10
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally
Affected: before 16.0.10417.20097
CVE-2026-21258
5.5
1%
Feb 10
Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally
Affected: before 16.0.10417.20097
CVE-2025-48812
5.5
1%
Jul 8
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally
Affected: before 16.0.10417.20027
CVE-2023-36766
5.5
1%
Sep 12
Microsoft Excel Information Disclosure Vulnerability
Affected: All versions, or not specified
CVE-2023-33162
5.5
1%
Jul 11
Microsoft Excel Information Disclosure Vulnerability
Affected: All versions, or not specified
CVE-2022-41103
5.5
1%
Nov 9
Microsoft Word Information Disclosure Vulnerability
Affected: All versions, or not specified
CVE-2022-41060
5.5
1%
Nov 9
Microsoft Word Information Disclosure Vulnerability
Affected: All versions, or not specified
CVE-2022-30172
5.5
3%
Jun 15
Microsoft Office Information Disclosure Vulnerability
Affected: All versions, or not specified
CVE-2022-30171
5.5
3%
Jun 15
Microsoft Office Information Disclosure Vulnerability
Affected: All versions, or not specified
CVE-2022-30159
5.5
3%
Jun 15
Microsoft Office Information Disclosure Vulnerability
Affected: All versions, or not specified
CVE-2022-22716
5.5
5%
Feb 9
Microsoft Excel Information Disclosure Vulnerability
Affected: All versions, or not specified
CVE-2021-40472
5.5
1%
Oct 13
Microsoft Excel Information Disclosure Vulnerability
Affected: All versions, or not specified
CVE-2021-31178
5.5
16%
May 11
Microsoft Office Information Disclosure Vulnerability
Affected: All versions, or not specified
CVE-2021-31174
5.5
3%
May 11
Microsoft Excel Information Disclosure Vulnerability
Affected: All versions, or not specified
CVE-2021-28456
5.5
4%
Apr 13
Microsoft Excel Information Disclosure Vulnerability
Affected: All versions, or not specified
CVE-2020-17126
5.5
1%
Dec 10
Microsoft Excel Information Disclosure Vulnerability
Affected: All versions, or not specified
CVE-2020-1224
5.5
4%
Sep 11
<p>An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory
Affected: All versions, or not specified
CVE-2020-1503
5.5
5%
Aug 17
An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory
Affected: All versions, or not specified
CVE-2020-1502
5.5
5%
Aug 17
An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory
Affected: All versions, or not specified
CVE-2020-1445
5.5
6%
Jul 14
An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, aka 'Microsoft Office Information Disclosure Vulnerability'
Affected: All versions, or not specified
CVE-2020-1342
5.5
6%
Jul 14
An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of…
Affected: All versions, or not specified
CVE-2019-1446
5.5
9%
Nov 12
An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosure Vulnerability'
Affected: All versions, or not specified
CVE-2020-0695
5.4
1%
Feb 11
A spoofing vulnerability exists when Office Online Server does not validate origin in cross-origin communications correctly, aka 'Microsoft Office Online Server Spoofing…
Affected: All versions, or not specified
CVE-2020-0647
5.4
1%
Jan 14
A spoofing vulnerability exists when Office Online does not validate origin in cross-origin communications correctly, aka 'Microsoft Office Online Spoofing Vulnerability'
Affected: All versions, or not specified
CVE-2019-1447
5.4
1%
Nov 12
A spoofing vulnerability exists when Office Online does not validate origin in cross-origin communications handlers correctly, aka 'Microsoft Office Online Spoofing Vulnerability'
Affected: All versions, or not specified
CVE-2019-1445
5.4
1%
Nov 12
A spoofing vulnerability exists when Office Online does not validate origin in cross-origin communications handlers correctly, aka 'Microsoft Office Online Spoofing Vulnerability'
Affected: All versions, or not specified
CVE-2018-8247
5.4
3%
Jun 14
An elevation of privilege vulnerability exists when Office Web Apps Server 2013 and Office Online Server fail to properly handle web requests, aka "Microsoft Office Elevation of…
Affected: 2016
Page 6 of 7 · 305 total
1…567