Office Online Server
by Microsoft
CVEs (233)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2025-62202 | Hig | 0.46 | 7.1 | 0.01 | Nov 11, 2025 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | ||
| CVE-2025-60726 | Hig | 0.46 | 7.1 | 0.01 | Nov 11, 2025 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | ||
| CVE-2025-59235 | Hig | 0.46 | 7.1 | 0.01 | Oct 14, 2025 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | ||
| CVE-2025-59232 | Hig | 0.46 | 7.1 | 0.00 | Oct 14, 2025 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | ||
| CVE-2023-23396 | Med | 0.43 | 6.5 | 0.04 | Mar 14, 2023 | Microsoft Excel Denial of Service Vulnerability | ||
| CVE-2020-1442 | Med | 0.40 | 6.1 | 0.02 | Jul 14, 2020 | A spoofing vulnerability exists when an Office Web Apps server does not properly sanitize a specially crafted request, aka 'Office Web Apps XSS Vulnerability'. | ||
| CVE-2021-31178 | Med | 0.37 | 5.5 | 0.16 | May 11, 2021 | Microsoft Office Information Disclosure Vulnerability | ||
| CVE-2026-21261 | Med | 0.36 | 5.5 | 0.01 | Feb 10, 2026 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | ||
| CVE-2026-21258 | Med | 0.36 | 5.5 | 0.01 | Feb 10, 2026 | Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | ||
| CVE-2025-48812 | Med | 0.36 | 5.5 | 0.01 | Jul 8, 2025 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | ||
| CVE-2023-33162 | Med | 0.36 | 5.5 | 0.01 | Jul 11, 2023 | Microsoft Excel Information Disclosure Vulnerability | ||
| CVE-2022-41103 | Med | 0.36 | 5.5 | 0.01 | Nov 9, 2022 | Microsoft Word Information Disclosure Vulnerability | ||
| CVE-2022-41060 | Med | 0.36 | 5.5 | 0.01 | Nov 9, 2022 | Microsoft Word Information Disclosure Vulnerability | ||
| CVE-2022-30172 | Med | 0.36 | 5.5 | 0.03 | Jun 15, 2022 | Microsoft Office Information Disclosure Vulnerability | ||
| CVE-2022-30171 | Med | 0.36 | 5.5 | 0.02 | Jun 15, 2022 | Microsoft Office Information Disclosure Vulnerability | ||
| CVE-2022-30159 | Med | 0.36 | 5.5 | 0.03 | Jun 15, 2022 | Microsoft Office Information Disclosure Vulnerability | ||
| CVE-2022-22716 | Med | 0.36 | 5.5 | 0.05 | Feb 9, 2022 | Microsoft Excel Information Disclosure Vulnerability | ||
| CVE-2021-40472 | Med | 0.36 | 5.5 | 0.01 | Oct 13, 2021 | Microsoft Excel Information Disclosure Vulnerability | ||
| CVE-2021-31174 | Med | 0.36 | 5.5 | 0.03 | May 11, 2021 | Microsoft Excel Information Disclosure Vulnerability | ||
| CVE-2021-28456 | Med | 0.36 | 5.5 | 0.04 | Apr 13, 2021 | Microsoft Excel Information Disclosure Vulnerability |
- risk 0.46cvss 7.1epss 0.01
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
- risk 0.46cvss 7.1epss 0.01
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
- risk 0.46cvss 7.1epss 0.01
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
- risk 0.46cvss 7.1epss 0.00
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
- risk 0.43cvss 6.5epss 0.04
Microsoft Excel Denial of Service Vulnerability
- risk 0.40cvss 6.1epss 0.02
A spoofing vulnerability exists when an Office Web Apps server does not properly sanitize a specially crafted request, aka 'Office Web Apps XSS Vulnerability'.
- risk 0.37cvss 5.5epss 0.16
Microsoft Office Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
- risk 0.36cvss 5.5epss 0.01
Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
- risk 0.36cvss 5.5epss 0.01
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
- risk 0.36cvss 5.5epss 0.01
Microsoft Excel Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Microsoft Word Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Microsoft Word Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.03
Microsoft Office Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.02
Microsoft Office Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.03
Microsoft Office Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.05
Microsoft Excel Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Microsoft Excel Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.03
Microsoft Excel Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.04
Microsoft Excel Information Disclosure Vulnerability
Page 9 of 12