Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

microsoft office online server - vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2023-33137
Microsoft Excel Remote Code Execution Vulnerability
Microsoft Office 2013Microsoft Office Online Server -Microsoft Office 2016Microsoft Office 2019
NA
CVE-2023-23396
Microsoft Excel Denial of Service Vulnerability
Microsoft Office Web Apps Server 2013Microsoft Office Online Server -
9.3
CVSSv2
CVE-2020-0852
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0850, CVE-2020-0851, CVE-2020-0855, CVE-2020-0892.
Microsoft Office 2016Microsoft Office 2019Microsoft Office Online Server 1.0Microsoft Sharepoint Server 2019
9.3
CVSSv2
CVE-2019-1205
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1201.
Microsoft Office 2016Microsoft Office 2019Microsoft Sharepoint Server 2019Microsoft Office 365 Proplus -Microsoft Office Online Server -
9.3
CVSSv2
CVE-2019-1035
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1034.
Microsoft Office Online Server -Microsoft Office 2016Microsoft Office 365 Proplus -Microsoft Office 2019Microsoft Sharepoint Server 2019
6.8
CVSSv2
CVE-2022-29109
Microsoft Excel Remote Code Execution Vulnerability
Microsoft Office Online Server -Microsoft 365 Apps -Microsoft Office 2019Microsoft Office 2021
6.8
CVSSv2
CVE-2020-1338
<p>A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the curre...
Microsoft Office Online Server -Microsoft Sharepoint Server 2019Microsoft Office 2019Microsoft 365 Apps -Microsoft Office 2016
4.3
CVSSv2
CVE-2020-1442
A spoofing vulnerability exists when an Office Web Apps server does not properly sanitize a specially crafted request, aka 'Office Web Apps XSS Vulnerability'.
Microsoft Office Online Server -Microsoft Office Web Apps 2013
6.8
CVSSv2
CVE-2021-31176
Microsoft Office Remote Code Execution Vulnerability
Microsoft Office 2013Microsoft Office Web Apps Server 2013Microsoft Office Online Server -Microsoft Office 2019Microsoft 365 Apps -Microsoft Office 2016
5.8
CVSSv2
CVE-2019-1445
A spoofing vulnerability exists when Office Online does not validate origin in cross-origin communications handlers correctly, aka 'Microsoft Office Online Spoofing Vulnerability'. This CVE ID is unique from CVE-2019-1447.
Microsoft Office Online Server -
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook