Vendor

Ascensio

2 known vulnerabilities.

Products

ONLYOFFICE DocumentServer 1 ONLYOFFICE DesktopEditors 1

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 5.0

CVE-2026-41034

ONLYOFFICE DocumentServer before 9.3.0 has an untrusted pointer dereference in XLS processing/conversion (via pictFmla.…

Ascensio ONLYOFFICE DocumentServer

Apr 16, 2026
Medium 6.2

CVE-2026-41030

In ONLYOFFICE DesktopEditors before 9.3.0, the update service allows attackers to perform actions on files with SYSTEM …

Ascensio ONLYOFFICE DesktopEditors

Apr 16, 2026