Microsoft Office Online Server vulnerabilities, page 2
298 vulnerabilities
Known vulnerabilities in Microsoft Office Online Server, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-97757microsoft365_apps+10
EPSS score0.72%
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-97756microsoft365_apps+10EPSS score0.78%
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-97755microsoft365_apps+12EPSS score0.78%
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-97754microsoft365_apps+10EPSS score0.72%
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-97753microsoft365_apps+10EPSS score0.78%
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-97752microsoft365_apps+10EPSS score0.72%
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-97751microsoft365_apps+10EPSS score0.52%
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-97750microsoft365_apps+10EPSS score0.72%
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-97748microsoft365_apps+10EPSS score0.72%
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-97747microsoft365_apps+10EPSS score0.72%
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-97746microsoft365_apps+10EPSS score0.72%
Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-97742microsoft365_apps+10EPSS score0.78%
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-97740microsoft365_apps+10EPSS score0.83%
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.CVE-2026-97739microsoft365_apps+10EPSS score0.78%
Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-97738microsoft365_apps+10EPSS score0.72%
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-97017microsoft365_apps+10EPSS score0.72%
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-97010microsoft365_apps+10EPSS score0.72%
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-97008microsoft365_apps+10EPSS score0.72%
Buffer underwrite ('buffer underflow') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-97007microsoft365_apps+10EPSS score0.72%
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-97004microsoft365_apps+10EPSS score0.72%
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.