CVE Tools
Track your stack

Office Online Server

308 CVEs tracked. 2 of them are in CISA KEV.

This hub aggregates every CVE we track for Office Online Server, a product in the enterprise software space. Use it to gauge the current risk picture and drill into individual advisories.

Office Online Server CVEs per month

Nov 2024 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Office Online Server CVEs per month
MonthCVEs
2024-111
2024-120
2025-012
2025-025
2025-033
2025-043
2025-058
2025-061
2025-073
2025-085
2025-096
2025-108
2025-116
2025-125
2026-013
2026-023
2026-034
2026-045
2026-053
2026-067
2026-0738
2026-0824
2026-094
2026-1044

Severity

How the 308 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical21%
  • High25282%
  • Medium5217%
  • Low21%

Latest CVEs

The 15 most recently published vulnerabilities affecting Office Online Server.

  1. CVE-2026-108446Microsoft Office Excel Remote Code Execution Vulnerability8.8
  2. CVE-2026-100210Microsoft Office Excel Remote Code Execution Vulnerability8.8
  3. CVE-2026-100212Microsoft Office Excel Remote Code Execution Vulnerability8.8
  4. CVE-2026-97768Microsoft Office Excel Remote Code Execution Vulnerability8.8
  5. CVE-2026-97775Microsoft Office Excel Remote Code Execution Vulnerability8.8
  6. CVE-2026-97772Microsoft Office Excel Remote Code Execution Vulnerability8.8
  7. CVE-2026-97777Microsoft Office Excel Remote Code Execution Vulnerability8.8
  8. CVE-2026-97742Microsoft Office Excel Remote Code Execution Vulnerability8.8
  9. CVE-2026-97010Microsoft Office Excel Remote Code Execution Vulnerability8.8
  10. CVE-2026-97004Microsoft Office Excel Remote Code Execution Vulnerability8.8
  11. CVE-2026-97757Microsoft Office Excel Remote Code Execution Vulnerability8.8
  12. CVE-2026-97746Microsoft Office Excel Remote Code Execution Vulnerability8.8
  13. CVE-2026-97738Microsoft Office Excel Remote Code Execution Vulnerability8.8
  14. CVE-2026-97763Microsoft Office Excel Remote Code Execution Vulnerability8.8
  15. CVE-2026-97762Microsoft Office Excel Remote Code Execution Vulnerability8.8

Product grouping is registry-driven, with AI assist and human review. How it works