CVE Intelligence

Ascensio ONLYOFFICE DocumentServer vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Ascensio ONLYOFFICE DocumentServer: 1 record(s), with affected versions and fixes.

CVE-2026-41034 Medium · 5.0 CWE-125 Apr 16, 2026
Out-of-bounds Read in Ascensio ONLYOFFICE DocumentServer
ONLYOFFICE DocumentServer before 9.3.0 has an untrusted pointer dereference in XLS processing/conversion (via pictFmla.cbBufInCtlStm and other vectors), leading to an information leak and ASLR bypass.