Patch tracker / Products / Office Online Server

Office Online Server: vulnerabilities and security updates

Every CVE affecting Office Online Server and the Microsoft update (KB) that fixes it, ranked by real-world risk. Actively exploited (CISA KEV) first, then EPSS exploit probability, on top of CVSS severity.

CVEs
141
Updates (KBs)
20
Actively exploited (KEV)
0
Critical Severity
0

CVEs affecting Office Online Server

CVESeverityCVSSEPSSStatus
CVE-2025-26642High7.824%-
CVE-2025-49697High8.43.0%-
CVE-2026-65807High8.80.9%-
CVE-2026-68797High8.80.9%-
CVE-2026-68799High8.80.9%-
CVE-2026-68802High8.80.9%-
CVE-2026-68808High8.80.9%-
CVE-2026-70327High8.80.9%-
CVE-2026-70328High8.80.9%-
CVE-2026-48580High8.80.9%-
CVE-2026-50408High8.80.9%-
CVE-2026-50678High8.80.9%-
CVE-2026-54988High8.80.9%-
CVE-2026-55046High8.80.9%-
CVE-2026-55054High8.80.9%-
CVE-2026-55138High8.80.9%-
CVE-2026-55898High8.80.9%-
CVE-2026-81390High8.80.9%-
CVE-2026-81401High8.80.9%-
CVE-2025-21354High8.40.9%-
CVE-2025-21362High8.40.9%-
CVE-2025-59236High8.40.7%-
CVE-2025-48812High8.40.5%-
CVE-2026-26109High8.40.5%-
CVE-2025-27746High7.82.5%-
CVE-2025-27751High7.82.5%-
CVE-2026-44822High8.20.8%-
CVE-2026-45455High8.20.8%-
CVE-2025-47165High7.82.2%-
CVE-2025-21381High7.81.1%-
CVE-2025-21386High7.81.1%-
CVE-2025-21387High7.81.1%-
CVE-2025-21390High7.81.1%-
CVE-2025-21394High7.81.1%-
CVE-2026-68793High7.80.9%-
CVE-2026-68794High7.80.9%-
CVE-2026-68795High7.80.9%-
CVE-2026-68796High7.80.9%-
CVE-2026-68800High7.80.9%-
CVE-2026-68801High7.80.9%-
CVE-2026-68803High7.80.9%-
CVE-2026-68804High7.80.9%-
CVE-2026-68805High7.80.9%-
CVE-2026-68806High7.80.9%-
CVE-2026-68807High7.80.9%-
CVE-2026-68810High7.80.9%-
CVE-2026-68811High7.80.9%-
CVE-2026-68812High7.80.9%-
CVE-2026-68814High7.80.9%-
CVE-2026-68815High7.80.9%-
CVE-2026-68816High7.80.9%-
CVE-2026-68817High7.80.9%-
CVE-2026-47642High7.80.9%-
CVE-2026-50675High7.80.9%-
CVE-2026-54131High7.80.9%-
CVE-2026-55024High7.80.9%-
CVE-2026-55025High7.80.9%-
CVE-2026-55029High7.80.9%-
CVE-2026-55031High7.80.9%-
CVE-2026-55036High7.80.9%-
CVE-2026-55037High7.80.9%-
CVE-2026-55039High7.80.9%-
CVE-2026-55041High7.80.9%-
CVE-2026-55044High7.80.9%-
CVE-2026-55048High7.80.9%-
CVE-2026-55053High7.80.9%-
CVE-2026-55058High7.80.9%-
CVE-2026-55131High7.80.9%-
CVE-2026-55136High7.80.9%-
CVE-2026-55137High7.80.9%-
CVE-2026-55141High7.80.9%-
CVE-2026-55899High7.80.9%-
CVE-2026-55947High7.80.9%-
CVE-2026-55948High7.80.9%-
CVE-2026-55949High7.80.9%-
CVE-2026-58618High7.80.9%-
CVE-2026-81947High7.80.9%-
CVE-2026-81956High7.80.9%-
CVE-2026-44817High7.80.8%-
CVE-2026-44820High7.80.8%-
CVE-2026-44823High7.80.8%-
CVE-2026-45469High7.80.8%-
CVE-2025-24075High7.80.7%-
CVE-2025-24081High7.80.7%-
CVE-2025-24082High7.80.7%-
CVE-2026-20950High7.80.7%-
CVE-2026-20957High7.80.7%-
CVE-2025-59231High7.80.7%-
CVE-2025-59233High7.80.7%-
CVE-2025-59223High7.80.7%-
CVE-2025-59224High7.80.7%-
CVE-2025-59225High7.80.7%-
CVE-2025-62561High7.80.7%-
CVE-2025-62563High7.80.7%-
CVE-2025-62564High7.80.7%-
CVE-2025-62556High7.80.7%-
CVE-2025-62560High7.80.7%-
CVE-2025-60727High7.80.6%-
CVE-2025-62200High7.80.6%-
CVE-2025-62201High7.80.6%-
CVE-2025-62203High7.80.6%-
CVE-2025-29977High7.80.6%-
CVE-2025-29979High7.80.6%-
CVE-2025-30375High7.80.6%-
CVE-2025-30376High7.80.6%-
CVE-2025-30379High7.80.6%-
CVE-2025-30381High7.80.6%-
CVE-2025-30383High7.80.6%-
CVE-2026-21259High7.80.6%-
CVE-2026-21258High7.80.6%-
CVE-2026-21261High7.80.6%-
CVE-2026-20955High7.80.6%-
CVE-2025-54896High7.80.6%-
CVE-2025-54898High7.80.6%-
CVE-2025-54900High7.80.6%-
CVE-2025-54902High7.80.6%-
CVE-2025-54903High7.80.6%-
CVE-2025-54904High7.80.6%-
CVE-2025-53741High7.80.6%-
CVE-2025-53759High7.80.6%-
CVE-2025-53735High7.80.6%-
CVE-2025-53737High7.80.6%-
CVE-2025-53739High7.80.6%-
CVE-2025-49711High7.80.5%-
CVE-2026-32189High7.80.5%-
CVE-2026-32197High7.80.5%-
CVE-2026-32198High7.80.5%-
CVE-2026-32199High7.80.5%-
CVE-2026-26107High7.80.5%-
CVE-2026-26108High7.80.5%-
CVE-2026-26112High7.80.5%-
CVE-2026-40359High7.80.5%-
CVE-2026-40360High7.80.5%-
CVE-2026-40362High7.80.5%-
CVE-2025-59235High7.12.5%-
CVE-2025-59232High7.12.5%-
CVE-2026-55122High7.10.9%-
CVE-2025-60726High7.10.6%-
CVE-2025-62202High7.10.6%-
CVE-2026-32188High7.10.5%-
CVE-2026-44818High7.00.8%-

Updates (KBs) for Office Online Server

UpdateReleasedSeverityCVSSEPSSCVEsStatus
KB50028842026-08-11High8.80.9%58-
KB50026772025-01-14High8.40.9%2-
KB50027972025-10-14High8.40.7%8-
KB50027402025-07-08High8.40.5%3-
KB50028462026-03-10High8.40.5%4-
KB50026992025-04-08High7.82.5%3-
KB50028752026-06-09High8.20.8%7-
KB50027282025-06-10High7.82.2%1-
KB50026792025-02-11High7.81.1%5-
KB50026902025-03-11High7.80.7%3-
KB50028012025-11-11High7.80.6%6-
KB50027072025-05-13High7.80.6%7-
KB50028352026-02-10High7.80.6%3-
KB50028172025-12-09High7.80.6%5-
KB50028242026-01-13High7.80.6%3-
KB50027762025-09-09High7.80.6%6-
KB50027522025-08-12High7.80.6%5-
KB50029102026-09-08High7.80.5%4-
KB50028552026-04-14High7.80.5%5-
KB50028712026-05-12High7.80.5%3-

Ranked across all products on the Microsoft patch tracker and the CVE and vulnerability management reference. Browse every product: product index.

Most searched on Senserva right now

KB5122876 install notes and severity KB5126052: the full CVE list KB5122882: patch details KB5123099: the full CVE list KB5120708 download and what it fixes KB5122871 install notes and severity KB5129235 install notes and severity KB5122878: patch details KB5120238 download and what it fixes KB5129238 download and what it fixes
New to a term on this page? CVE, KB, KEV, CVSS, and EPSS are each explained once, on the Senserva security lexicon. Reference: Microsoft CVE and vulnerability management and the Microsoft patching guide.
All information provided as is, without warranty; verify against the vendor advisory before acting. All information and usage is subject to the Senserva EULA. Data notice and terms.