Patch tracker / Products / Office Online Server

Office Online Server: vulnerabilities and security updates

Every CVE affecting Office Online Server and the Microsoft update (KB) that fixes it, ranked by real-world risk. Actively exploited (CISA KEV) first, then EPSS exploit probability, on top of CVSS severity.

CVEs
143
Updates (KBs)
54
Actively exploited (KEV)
0
Critical Severity
0

CVEs affecting Office Online Server

CVESeverityCVSSEPSSStatus
CVE-2025-26642High7.822%-
CVE-2025-27747High7.822%-
CVE-2025-49697High8.42.8%-
CVE-2026-65807High8.80.9%-
CVE-2026-62870High8.80.9%-
CVE-2025-21362High8.40.9%-
CVE-2025-21354High8.40.9%-
CVE-2025-59236High8.40.6%-
CVE-2026-26109High8.40.5%-
CVE-2025-27746High7.82.4%-
CVE-2025-27751High7.82.4%-
CVE-2025-27750High7.82.4%-
CVE-2026-44822High8.20.6%-
CVE-2026-45455High8.20.6%-
CVE-2025-47165High7.82.0%-
CVE-2025-21381High7.81.1%-
CVE-2025-21386High7.81.1%-
CVE-2025-21387High7.81.1%-
CVE-2025-21390High7.81.1%-
CVE-2025-21394High7.81.1%-
CVE-2026-68793High7.80.9%-
CVE-2026-68794High7.80.9%-
CVE-2026-68795High7.80.9%-
CVE-2026-68796High7.80.9%-
CVE-2026-68800High7.80.9%-
CVE-2026-68801High7.80.9%-
CVE-2026-68803High7.80.9%-
CVE-2026-68804High7.80.9%-
CVE-2026-68805High7.80.9%-
CVE-2026-68806High7.80.9%-
CVE-2026-68807High7.80.9%-
CVE-2026-68810High7.80.9%-
CVE-2026-68811High7.80.9%-
CVE-2026-68812High7.80.9%-
CVE-2026-68814High7.80.9%-
CVE-2026-68815High7.80.9%-
CVE-2026-68816High7.80.9%-
CVE-2026-68817High7.80.9%-
CVE-2026-47642High7.80.9%-
CVE-2026-50675High7.80.9%-
CVE-2026-54131High7.80.9%-
CVE-2026-55024High7.80.9%-
CVE-2026-55025High7.80.9%-
CVE-2026-55029High7.80.9%-
CVE-2026-55031High7.80.9%-
CVE-2026-55036High7.80.9%-
CVE-2026-55037High7.80.9%-
CVE-2026-55039High7.80.9%-
CVE-2026-55041High7.80.9%-
CVE-2026-55044High7.80.9%-
CVE-2026-55048High7.80.9%-
CVE-2026-55053High7.80.9%-
CVE-2026-55058High7.80.9%-
CVE-2026-55131High7.80.9%-
CVE-2026-55136High7.80.9%-
CVE-2026-55137High7.80.9%-
CVE-2026-55141High7.80.9%-
CVE-2026-55899High7.80.9%-
CVE-2026-55947High7.80.9%-
CVE-2026-55948High7.80.9%-
CVE-2026-55949High7.80.9%-
CVE-2026-58618High7.80.9%-
CVE-2025-24081High7.80.7%-
CVE-2025-24082High7.80.7%-
CVE-2025-24075High7.80.7%-
CVE-2026-20950High7.80.7%-
CVE-2026-20957High7.80.7%-
CVE-2025-62561High7.80.7%-
CVE-2025-62563High7.80.7%-
CVE-2025-62564High7.80.7%-
CVE-2025-62556High7.80.7%-
CVE-2025-62560High7.80.7%-
CVE-2025-62553High7.80.7%-
CVE-2025-60727High7.80.6%-
CVE-2025-62200High7.80.6%-
CVE-2025-62201High7.80.6%-
CVE-2025-62203High7.80.6%-
CVE-2025-29977High7.80.6%-
CVE-2025-29979High7.80.6%-
CVE-2025-30375High7.80.6%-
CVE-2025-30376High7.80.6%-
CVE-2025-30379High7.80.6%-
CVE-2025-30381High7.80.6%-
CVE-2025-30383High7.80.6%-
CVE-2026-44817High7.80.6%-
CVE-2026-44820High7.80.6%-
CVE-2026-44823High7.80.6%-
CVE-2026-45469High7.80.6%-
CVE-2025-59231High7.80.6%-
CVE-2025-59233High7.80.6%-
CVE-2025-59223High7.80.6%-
CVE-2025-59224High7.80.6%-
CVE-2025-59225High7.80.6%-
CVE-2026-20955High7.80.6%-
CVE-2026-21259High7.80.6%-
CVE-2025-54896High7.80.6%-
CVE-2025-54898High7.80.6%-
CVE-2025-54902High7.80.6%-
CVE-2025-54903High7.80.6%-
CVE-2025-54904High7.80.6%-
CVE-2025-54900High7.80.6%-
CVE-2025-54899High7.80.6%-
CVE-2025-53741High7.80.6%-
CVE-2025-53759High7.80.6%-
CVE-2025-53735High7.80.6%-
CVE-2025-53737High7.80.6%-
CVE-2025-53739High7.80.6%-
CVE-2025-49711High7.80.5%-
CVE-2026-26108High7.80.5%-
CVE-2026-26112High7.80.5%-
CVE-2026-26107High7.80.5%-
CVE-2026-32189High7.80.4%-
CVE-2026-32197High7.80.4%-
CVE-2026-32198High7.80.4%-
CVE-2026-32199High7.80.4%-
CVE-2026-40360High7.80.4%-
CVE-2026-40359High7.80.4%-
CVE-2026-40362High7.80.4%-
CVE-2025-59235High7.12.3%-
CVE-2025-59232High7.12.3%-
CVE-2026-55122High7.10.9%-
CVE-2025-60726High7.10.6%-
CVE-2025-62202High7.10.6%-
CVE-2026-32188High7.10.4%-
CVE-2026-44818High7.00.6%-
CVE-2026-50678Medium6.60.9%-
CVE-2026-70327Medium6.50.9%-
CVE-2026-70328Medium6.50.9%-
CVE-2026-55054Medium6.50.9%-
CVE-2026-54988Medium6.10.9%-
CVE-2026-55898Medium6.10.9%-
CVE-2026-68797Medium5.50.9%-
CVE-2026-68799Medium5.50.9%-
CVE-2026-68802Medium5.50.9%-
CVE-2026-68808Medium5.50.9%-
CVE-2026-48580Medium5.50.9%-
CVE-2026-50408Medium5.50.9%-
CVE-2026-55046Medium5.50.9%-
CVE-2026-55138Medium5.50.9%-
CVE-2025-59240Medium5.50.6%-
CVE-2026-21258Medium5.50.6%-
CVE-2026-21261Medium5.50.6%-
CVE-2025-48812Medium5.50.5%-

Updates (KBs) for Office Online Server

UpdateReleasedSeverityCVSSEPSSCVEsStatus
KB50028842026-08-11High8.80.9%58-
KB50028862026-07-14High8.80.9%32-
KB50029032026-08-11High8.80.9%25-
KB50026772025-01-14High8.40.9%2-
KB50026732025-01-14High8.40.9%1-
KB50027972025-10-14High8.40.6%8-
KB50027402025-07-08High8.40.5%3-
KB50027492025-07-08High8.40.5%3-
KB50028462026-03-10High8.40.5%4-
KB50028492026-03-10High8.40.5%4-
KB50026992025-04-08High7.82.4%3-
KB50027042025-04-08High7.82.4%3-
KB50028752026-06-09High8.20.6%7-
KB50028772026-06-09High8.20.6%7-
KB50027282025-06-10High7.82.0%1-
KB50027352025-06-10High7.82.0%1-
KB50026792025-02-11High7.81.1%5-
KB50026872025-02-11High7.81.1%5-
KB50026842025-02-11High7.80.9%1-
KB44844322025-04-08High7.80.8%1-
KB50026802025-04-08High7.80.8%2-
KB50025882025-04-08High7.80.8%1-
KB50027012025-04-08High7.80.8%1-
KB50027032025-04-08High7.80.8%1-
KB50026902025-03-11High7.80.7%3-
KB50026962025-03-11High7.80.7%3-
KB50026942025-03-11High7.80.7%1-
KB50028182025-12-09High7.80.7%3-
KB50028202025-12-09High7.80.7%6-
KB50028012025-11-11High7.80.6%6-
KB50028102025-11-11High7.80.6%3-
KB50028112025-11-11High7.80.6%7-
KB50027072025-05-13High7.80.6%7-
KB50027172025-05-13High7.80.6%7-
KB50027942025-10-14High7.80.6%7-
KB50028172025-12-09High7.80.6%5-
KB50028242026-01-13High7.80.6%3-
KB50028352026-02-10High7.80.6%3-
KB50028372026-02-10High7.80.6%3-
KB50027762025-09-09High7.80.6%6-
KB50027822025-09-09High7.80.6%7-
KB50027522025-08-12High7.80.6%5-
KB50027582025-08-12High7.80.6%4-
KB50027162025-05-13High7.80.5%1-
KB50027182026-03-10High7.80.5%1-
KB50028552026-04-14High7.80.4%5-
KB50028602026-04-14High7.80.4%5-
KB50028652026-05-12High7.80.4%3-
KB50028712026-05-12High7.80.4%3-
KB50023412025-10-14High7.10.6%2-
KB50027192025-10-14High7.10.6%2-
KB50027202025-10-14High7.10.6%2-
KB50027572025-10-14High7.10.6%2-
KB50027342025-07-08Medium5.50.5%1-

Ranked across all products on the Microsoft patch tracker and the CVE and vulnerability management reference. Browse every product: product index.

Most searched on Senserva right now

New to a term on this page? CVE, KB, KEV, CVSS, and EPSS are each explained once, on the Senserva security lexicon. Reference: Microsoft CVE and vulnerability management and the Microsoft patching guide.
Provided as is, without warranty; verify against the vendor advisory before acting. Data notice and terms.