CVE Intelligence

Vulnerabilidades de Ascensio

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Ascensio: 2 registro(s), com severidade, exploração e correções.

ONLYOFFICE DesktopEditors 1ONLYOFFICE DocumentServer 1

Somente exploradas (KEV) →

CVE-2026-41034 Média · 5.0 CWE-125 16/04/2026
Out-of-bounds Read em Ascensio ONLYOFFICE DocumentServer
ONLYOFFICE DocumentServer before 9.3.0 has an untrusted pointer dereference in XLS processing/conversion (via pictFmla.cbBufInCtlStm and other vectors), leading to an information leak and ASLR bypass.
CVE-2026-41030 Média · 6.2 CWE-669 16/04/2026
Incorrect Resource Transfer Between Spheres em Ascensio ONLYOFFICE DesktopEditors
In ONLYOFFICE DesktopEditors before 9.3.0, the update service allows attackers to perform actions on files with SYSTEM privileges.