OO
Product
Office Online Server
On CISA KEVExploited in the wild
305
CVEs
1
On KEV
9.8
Max CVSS
44
New 30D
Severity mix
Critical 2High 249Medium 52Low 2
Watch
Add Office Online Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-0195 | 5.4 | Apr 12 | Microsoft Excel Services on Microsoft SharePoint Server 2010 SP1 and SP2, Microsoft Excel Web Apps 2010 SP2, Microsoft Office Web Apps 2010 SP2, Microsoft Office Web Apps Server… Affected: All versions, or not specified |
| CVE-2021-34451 | 5.3 | Jul 16 | Microsoft Office Online Server Spoofing Vulnerability Affected: All versions, or not specified |
| CVE-2026-45455 | 4.3 | Jun 9 | Microsoft Excel Information Disclosure Vulnerability Affected: 16.0.0.0 before 16.0.10417.20137 |
| CVE-2026-50678 | 3.3 | Jul 14 | Microsoft Excel Information Disclosure Vulnerability Affected: 16.0.0.0 before 16.0.10417.20175 |
| CVE-2018-0919 | 3.3 | Mar 14 | Microsoft Office 2010 SP2, 2013 SP1, and 2016, Microsoft Office 2016 Click-to-Run Microsoft Office 2016 for Mac, Microsoft Office Web Apps 2010 SP2, Microsoft Office Web Apps 2013… Affected: 2016 |