Skip to content

Vulnerabilities of Microsoft Office Online Server

Is your version affected?

CVE Summary Score Published
CVE-2025-27746 Use after free in Microsoft Office allows an unauthorized attacker to execute code locally 7.8 High Apr 8, 2025
CVE-2025-24075 Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally 7.8 High Mar 11, 2025
CVE-2025-24082 Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally 7.8 High Mar 11, 2025
CVE-2025-24081 Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally 7.8 High Mar 11, 2025
CVE-2025-21394 Microsoft Excel Remote Code Execution Vulnerability 7.8 High Feb 11, 2025
CVE-2025-21390 Microsoft Excel Remote Code Execution Vulnerability 7.8 High Feb 11, 2025
CVE-2025-21387 Microsoft Excel Remote Code Execution Vulnerability 7.8 High Feb 11, 2025
CVE-2025-21386 Microsoft Excel Remote Code Execution Vulnerability 7.8 High Feb 11, 2025
CVE-2025-21381 Microsoft Excel Remote Code Execution Vulnerability 7.8 High Feb 11, 2025
CVE-2025-21362 Microsoft Excel Remote Code Execution Vulnerability 8.4 High Jan 14, 2025
CVE-2025-21354 Microsoft Excel Remote Code Execution Vulnerability 8.4 High Jan 14, 2025
CVE-2024-30042 Microsoft Excel Remote Code Execution Vulnerability 7.8 High May 14, 2024
CVE-2021-43256 Microsoft Excel Remote Code Execution Vulnerability 7.8 High Dec 15, 2021
CVE-2021-31939 Microsoft Excel Remote Code Execution Vulnerability 7.8 High Jun 8, 2021
CVE-2021-24070 Microsoft Excel Remote Code Execution Vulnerability 7.8 High Feb 25, 2021
CVE-2021-24069 Microsoft Excel Remote Code Execution Vulnerability 7.8 High Feb 25, 2021
CVE-2021-24067 Microsoft Excel Remote Code Execution Vulnerability 7.8 High Feb 25, 2021
CVE-2020-17123 Microsoft Excel Remote Code Execution Vulnerability 7.8 High Dec 9, 2020
CVE-2020-1495 A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle… Not rated Aug 17, 2020
CVE-2020-0695 A spoofing vulnerability exists when Office Online Server does not validate origin in cross-origin communications… Not rated Feb 11, 2020
CVE-2020-0647 A spoofing vulnerability exists when Office Online does not validate origin in cross-origin communications correctly,… Not rated Jan 14, 2020
CVE-2019-1447 A spoofing vulnerability exists when Office Online does not validate origin in cross-origin communications handlers… Not rated Nov 12, 2019
CVE-2019-1445 A spoofing vulnerability exists when Office Online does not validate origin in cross-origin communications handlers… Not rated Nov 12, 2019
CVE-2019-1331 A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle… Not rated Oct 10, 2019
CVE-2018-8628 A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle… Not rated Dec 12, 2018

Other Microsoft products