OO
Product
Office Online Server
by Microsoft · last CVE Oct 15, 2026
On CISA KEVExploited in the wild
305
CVEs
1
On KEV
9.8
Max CVSS
44
New 30D
Severity mix
Critical 2High 249Medium 52Low 2
Watch

Add Office Online Server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-50678
3.3
0%
Jul 14
Microsoft Excel Information Disclosure Vulnerability
Affected: 16.0.0.0 before 16.0.10417.20175
CVE-2018-0919
3.3
12%
Mar 14
Microsoft Office 2010 SP2, 2013 SP1, and 2016, Microsoft Office 2016 Click-to-Run Microsoft Office 2016 for Mac, Microsoft Office Web Apps 2010 SP2, Microsoft Office Web Apps 2013…
Affected: 2016
Showing 2