Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Office_online_server
(Microsoft)Repositories |
Unknown: This might be proprietary software. |
#Vulnerabilities | 114 |
Date | Id | Summary | Products | Score | Patch | Annotated |
---|---|---|---|---|---|---|
2022-11-09 | CVE-2022-41060 | Microsoft Word Information Disclosure Vulnerability | 365_apps, Office, Office_online_server, Office_web_apps_server, Sharepoint_enterprise_server, Sharepoint_server, Word | 5.5 | ||
2022-11-09 | CVE-2022-41061 | Microsoft Word Remote Code Execution Vulnerability | 365_apps, Office, Office_online_server, Office_web_apps_server, Sharepoint_enterprise_server, Sharepoint_server, Word | 7.8 | ||
2022-11-09 | CVE-2022-41103 | Microsoft Word Information Disclosure Vulnerability | 365_apps, Office, Office_online_server, Office_web_apps_server, Sharepoint_enterprise_server, Sharepoint_server, Word | 5.5 | ||
2021-12-15 | CVE-2021-43256 | Microsoft Excel Remote Code Execution Vulnerability | 365_apps, Excel, Excel_rt, Office, Office_online_server, Office_web_apps | 7.8 | ||
2020-01-14 | CVE-2020-0647 | A spoofing vulnerability exists when Office Online does not validate origin in cross-origin communications correctly, aka 'Microsoft Office Online Spoofing Vulnerability'. | Office_online_server | 5.4 | ||
2020-02-11 | CVE-2020-0695 | A spoofing vulnerability exists when Office Online Server does not validate origin in cross-origin communications correctly, aka 'Microsoft Office Online Server Spoofing Vulnerability'. | Office_online_server | 5.4 | ||
2020-03-12 | CVE-2020-0850 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0851, CVE-2020-0852, CVE-2020-0855, CVE-2020-0892. | Office, Office_365_proplus, Office_online_server, Sharepoint_enterprise_server, Sharepoint_foundation, Sharepoint_server, Word | 8.8 | ||
2020-03-12 | CVE-2020-0852 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0850, CVE-2020-0851, CVE-2020-0855, CVE-2020-0892. | Office, Office_online_server, Sharepoint_server | 7.8 | ||
2020-03-12 | CVE-2020-0892 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0850, CVE-2020-0851, CVE-2020-0852, CVE-2020-0855. | Office, Office_365_proplus, Office_online_server, Office_web_apps, Sharepoint_enterprise_server, Sharepoint_foundation, Sharepoint_server, Word | 7.8 | ||
2020-04-15 | CVE-2020-0980 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. | Office, Office_365_proplus, Office_online_server, Office_web_apps, Sharepoint_enterprise_server, Sharepoint_server, Word | 7.8 |