office online server · threatengine.sh

Home/Product/microsoft office online server

Product

microsoft office online server

185 known vulnerabilities across versions

Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.

Sort Min CVSS Published since

< 16.0.10417.20113

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

< 16.0.10417.20113

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

< 16.0.10417.20113

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

< 16.0.10417.20102

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

< 16.0.10417.20102

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

< 16.0.10417.20102

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

< 16.0.10417.20102

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

< 16.0.10417.20097

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

< 16.0.10417.20097

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to elevate privileges locally.

< 16.0.10417.20097

Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

< 16.0.10417.20083

Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

< 16.0.10417.20083

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

< 16.0.10417.20083

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

< 16.0.10417.20075

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

< 16.0.10417.20075

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

< 16.0.10417.20075

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

< 16.0.10417.20075

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

< 16.0.10417.20075

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

< 16.0.10417.20068

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

< 16.0.10417.20068

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

< 16.0.10417.20068

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

< 16.0.10417.20068

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

< 16.0.10417.20068

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

< 16.0.10417.20068

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

< 16.0.10417.20059

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

< 16.0.10417.20059

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

< 16.0.10417.20059

Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute

< 16.0.10417.20059

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

< 16.0.10417.20059

Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute

< 16.0.10417.20059

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

< 16.0.10417.20059

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

< 16.0.10417.20059

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

< 16.0.10417.20047

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

< 16.0.10417.20047

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

< 16.0.10417.20047

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

< 16.0.10417.20047

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

< 16.0.10417.20047

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

< 16.0.10417.20047

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

< 16.0.10417.20027

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

< 16.0.10417.20027

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

< 16.0.10417.20027

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

< 16.0.10417.20018

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

< 16.0.10417.20010

Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute

< 16.0.10417.20010

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

< 16.0.10417.20010

Release of invalid pointer or reference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

< 16.0.10417.20010

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

< 16.0.10417.20010

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

< 16.0.10417.20010

Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute

< 16.0.10417.20010

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

< 16.0.10417.20010

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

< 16.0.10416.20058

Microsoft Excel Remote Code Execution Vulnerability

< 16.0.10416.20058

Microsoft Excel Remote Code Execution Vulnerability

< 16.0.10416.20058

Microsoft Excel Remote Code Execution Vulnerability

< 16.0.10416.20058

Microsoft Excel Remote Code Execution Vulnerability

< 16.0.10416.20058

Microsoft Excel Remote Code Execution Vulnerability

< 16.0.10416.20047

Microsoft Excel Remote Code Execution Vulnerability

< 16.0.10416.20047

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

< 16.0.10414.20000

Microsoft Excel Elevation of Privilege Vulnerability

< 16.0.10410.20003

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Information Disclosure Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Office Remote Code Execution Vulnerability

Microsoft Excel Information Disclosure Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Denial of Service Vulnerability

Microsoft Word Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Word Information Disclosure Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Word Remote Code Execution Vulnerability

Microsoft Word Information Disclosure Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Office Information Disclosure Vulnerability

Microsoft Office Information Disclosure Vulnerability

Microsoft Office Information Disclosure Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Information Disclosure Vulnerability

Microsoft Office Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Word Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Information Disclosure Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Office Online Server Spoofing Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Office Remote Code Execution Vulnerability

Microsoft Office Information Disclosure Vulnerability

Microsoft Office Remote Code Execution Vulnerability

Microsoft Office Remote Code Execution Vulnerability

Microsoft Office Remote Code Execution Vulnerability

Microsoft Excel Information Disclosure Vulnerability

Microsoft Excel Information Disclosure Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Word Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Office Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Word Remote Code Execution Vulnerability

Microsoft Word Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Information Disclosure Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

<p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in

<p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in

<p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in

<p>A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An

<p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in

<p>An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory. An attacke

<p>A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An

An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory. An attacker wh

An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory. An attacker wh

An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory. An attacker wh

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in mem

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'M

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'M

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'M

An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, aka 'Microso

A spoofing vulnerability exists when an Office Web Apps server does not properly sanitize a specially crafted request, aka 'Office

An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized va

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'M

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'M

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'M

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'M

A spoofing vulnerability exists when Office Online Server does not validate origin in cross-origin communications correctly, aka '

A spoofing vulnerability exists when Office Online does not validate origin in cross-origin communications correctly, aka 'Microso

A spoofing vulnerability exists when Office Online does not validate origin in cross-origin communications handlers correctly, aka

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsof

A spoofing vulnerability exists when Office Online does not validate origin in cross-origin communications handlers correctly, aka

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in mem

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An att

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An att

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An att

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An att

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'M

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "M

A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects i

An elevation of privilege vulnerability exists when Office Web Apps Server 2013 and Office Online Server fail to properly handle w

Microsoft Office 2010 SP2, 2013 SP1, and 2016, Microsoft Office 2016 Click-to-Run Microsoft Office 2016 for Mac, Microsoft Office

Microsoft Office 2010 SP2, 2013 SP1, and 2016, Microsoft Office 2016 Click-to-Run Microsoft Office 2016 for Mac, Microsoft Office

Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way

Microsoft Word 2016 in Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in me

Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 an

A remote code execution vulnerability exists in Microsoft PowerPoint 2016, Microsoft SharePoint Enterprise Server 2016, and Office

A remote code execution vulnerability exists in Excel Services, Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service

Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Off

A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka

A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka

Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2016, Office Online Server 2016, Office Web Apps 2010 SP2,Offi

Microsoft Excel Services on Microsoft SharePoint Server 2010 SP1 and SP2, Microsoft Excel Web Apps 2010 SP2, Microsoft Office Web

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, Excel View

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, Excel View

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel 2016 for Mac, Office Compatibility

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office 2016, Word 2016, Word for Mac 201

Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities

Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs

Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures

Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1

About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service

threatengine.sh · Open-source threat intelligence platform · 100+ authoritative sources · Every fact traces to its origin