Product · Microsoft

Microsoft Office Online Server

85 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

85 results · Feed

High 7.8

CVE-2021-28454

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office 2019 Microsoft Excel 2016

Apr 13, 2021
High 7.8

CVE-2021-28453

Microsoft Word Remote Code Execution Vulnerability

Microsoft Word Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office 2019 Microsoft SharePoint Server 2019

Apr 13, 2021
High 7.8

CVE-2021-28451

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office 2019 Microsoft Excel 2016

Apr 13, 2021
High 7.8

CVE-2021-27057

Microsoft Office Remote Code Execution Vulnerability

Microsoft Office Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office 2019 Microsoft Excel 2016

Mar 11, 2021
High 7.8

CVE-2021-27054

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office 2019 Microsoft Excel 2016

Mar 11, 2021
High 7.8

CVE-2021-27053

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office 2019 Microsoft Excel 2016

Mar 11, 2021
High 7.8

CVE-2021-24067

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office 2019 Office Online Server

Feb 25, 2021
High 7.8

CVE-2021-1716

Microsoft Word Remote Code Execution Vulnerability

Microsoft Word Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office 2019 Microsoft SharePoint Server 2019

Jan 12, 2021
High 7.8

CVE-2021-1715

Microsoft Word Remote Code Execution Vulnerability

Microsoft Word Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office 2019 Microsoft SharePoint Server 2019

Jan 12, 2021
High 7.8

CVE-2021-1714

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office 2019 Microsoft Excel 2016

Jan 12, 2021
High 7.8

CVE-2021-1713

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office 2019 Microsoft Excel 2016

Jan 12, 2021
High 7.8

CVE-2020-17129

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office 2019 Microsoft Excel 2016

Dec 9, 2020
High 7.8

CVE-2020-17128

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office 2019 Microsoft Excel 2016

Dec 9, 2020
Medium 5.5

CVE-2020-17126

Microsoft Excel Information Disclosure Vulnerability

Microsoft Excel Information Disclosure Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office 2019 Microsoft Excel 2016

Dec 9, 2020
High 7.8

CVE-2020-17125

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office 2019 Microsoft Excel 2016

Dec 9, 2020
High 7.8

CVE-2020-17065

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office 2019 Microsoft Excel 2016

Nov 11, 2020
High 7.8

CVE-2020-17064

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office 2019 Microsoft Excel 2016

Nov 11, 2020
High 7.8

CVE-2020-16932

Microsoft Excel Remote Code Execution Vulnerability

<p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If …

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office 2019 Microsoft Excel 2016

Oct 16, 2020
High 7.8

CVE-2020-16931

Microsoft Excel Remote Code Execution Vulnerability

<p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If …

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office 2019 Microsoft Excel 2016

Oct 16, 2020
High 7.8

CVE-2020-16929

Microsoft Excel Remote Code Execution Vulnerability

<p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If …

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office 2019 Microsoft Excel 2016

Oct 16, 2020
High 7.8

CVE-2020-1338

Microsoft Word Remote Code Execution Vulnerability

<p>A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security conte…

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office 2019 Microsoft SharePoint Server 2019

Sep 11, 2020
High 7.8

CVE-2020-1335

Microsoft Excel Remote Code Execution Vulnerability

<p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If …

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office 2019 Microsoft SharePoint Server 2019

Sep 11, 2020
High 7.8

CVE-2020-1218

Microsoft Word Remote Code Execution Vulnerability

<p>A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security conte…

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office 2019 Microsoft SharePoint Server 2019

Sep 11, 2020
Medium 5.5

CVE-2020-1224

Microsoft Excel Information Disclosure Vulnerability

<p>An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the user’s computer or data.</p> <p>To exploit the vuln…

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office 2019 Microsoft Excel 2016

Sep 11, 2020
High 8.8

CVE-2020-1583

Microsoft Word Information Disclosure Vulnerability

An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the user’s computer or data. To exploit the vulnerability, …

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office 2019 Microsoft SharePoint Server 2019

Aug 17, 2020
Unscored —

CVE-2020-1503

Microsoft Word Information Disclosure Vulnerability

An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the user’s computer or data. To exploit the vulnerability, …

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office 2019 Microsoft SharePoint Server 2019

Aug 17, 2020
Unscored —

CVE-2020-1502

Microsoft Word Information Disclosure Vulnerability

An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the user’s computer or data. To exploit the vulnerability, …

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office 2019 Microsoft SharePoint Server 2019

Aug 17, 2020
Unscored —

CVE-2020-1447 EPSS 11%

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in mem…

Microsoft Microsoft Office Microsoft SharePoint Server Microsoft Office Online Server

Jul 14, 2020
Unscored —

CVE-2020-1448

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in mem…

Microsoft Microsoft Office Microsoft SharePoint Server Microsoft Office Online Server

Jul 14, 2020
Unscored —

CVE-2020-1445

An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, a…

Microsoft Microsoft Office Microsoft SharePoint Server Microsoft Office Online Server

Jul 14, 2020
Unscored —

CVE-2020-1446 EPSS 11%

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in mem…

Microsoft Microsoft Office Microsoft SharePoint Server Microsoft Office Online Server

Jul 14, 2020
Unscored —

CVE-2020-1442

A spoofing vulnerability exists when an Office Web Apps server does not properly sanitize a specially crafted request, …

Microsoft Microsoft Office Online Server Microsoft Office Web Apps

Jul 14, 2020
Unscored —

CVE-2020-1342

An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an unini…

Microsoft Microsoft Office Microsoft SharePoint Server Microsoft Office Online Server

Jul 14, 2020
Unscored —

CVE-2020-0980 EPSS 12%

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in mem…

Microsoft Microsoft Office Microsoft SharePoint Server Microsoft Office Online Server

Apr 15, 2020
Unscored —

CVE-2020-0892 EPSS 12%

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in mem…

Microsoft Microsoft Office Microsoft SharePoint Server Microsoft Office Online Server

Mar 12, 2020
Unscored —

CVE-2020-0852 EPSS 12%

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in mem…

Microsoft Microsoft Office Microsoft SharePoint Server Microsoft Office Online Server

Mar 12, 2020
Unscored —

CVE-2020-0850

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in mem…

Microsoft Microsoft Office Microsoft SharePoint Server Microsoft Office Online Server

Mar 12, 2020
Unscored —

CVE-2019-1446

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, ak…

Microsoft Microsoft Office Microsoft Office Online Server Microsoft SharePoint Enterprise Server

Nov 12, 2019
Critical 9.8

CVE-2019-1205

Microsoft Word Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context …

Microsoft Microsoft Office 2019 Microsoft SharePoint Server 2019 Microsoft Office 2019 for Mac

Aug 14, 2019
Unscored —

CVE-2019-1201

Microsoft Word Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context …

Microsoft Microsoft Office 2019 Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016

Aug 14, 2019