CVE Tools
Track your stack

Office Online Server

366 CVEs tracked. 2 of them are in CISA KEV.

This hub aggregates every CVE we track for Office Online Server, a product in the enterprise software space. Use it to gauge the current risk picture and drill into individual advisories.

Office Online Server CVEs per month

Dec 2024 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Office Online Server CVEs per month
MonthCVEs
2024-120
2025-012
2025-025
2025-033
2025-043
2025-058
2025-061
2025-073
2025-085
2025-096
2025-108
2025-116
2025-125
2026-013
2026-023
2026-034
2026-045
2026-053
2026-067
2026-0738
2026-0825
2026-095
2026-1044
2026-1156

Severity

How the 366 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical21%
  • High30583%
  • Medium5716%
  • Low21%

Latest CVEs

The 15 most recently published vulnerabilities affecting Office Online Server.

  1. CVE-2026-118732Microsoft Office Excel Remote Code Execution Vulnerability8.8
  2. CVE-2026-118731Microsoft Office Excel Remote Code Execution Vulnerability8.8
  3. CVE-2026-118730Microsoft Office Excel Remote Code Execution Vulnerability8.8
  4. CVE-2026-118729Microsoft Office Excel Remote Code Execution Vulnerability8.8
  5. CVE-2026-118728Microsoft Office Excel Information Disclosure Vulnerability6.5
  6. CVE-2026-118727Microsoft Office Excel Information Disclosure Vulnerability6.5
  7. CVE-2026-118725Microsoft Office Excel Elevation of Privilege Vulnerability8.8
  8. CVE-2026-118726Microsoft Office Excel Remote Code Execution Vulnerability8.8
  9. CVE-2026-118724Microsoft Office Excel Remote Code Execution Vulnerability8.8
  10. CVE-2026-118723Microsoft Office Excel Remote Code Execution Vulnerability7.8
  11. CVE-2026-118722Microsoft Office Excel Remote Code Execution Vulnerability8.8
  12. CVE-2026-118721Microsoft Office Excel Remote Code Execution Vulnerability8.8
  13. CVE-2026-118720Microsoft Office Excel Remote Code Execution Vulnerability8.8
  14. CVE-2026-118719Microsoft Office Excel Remote Code Execution Vulnerability8.8
  15. CVE-2026-118718Microsoft Office Excel Remote Code Execution Vulnerability8.8

Product grouping is registry-driven, with AI assist and human review. How it works