Ascensio

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Ascensio records in CISA KEV

No Ascensio vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-29670 CVE-2026-41030 · GHSA-q42f-8h4q-g7mm

In ONLYOFFICE DesktopEditors before 9.3.0, the update service allows attackers to perform…

LOW 27

In ONLYOFFICE DesktopEditors before 9.3.0, the update service allows attackers to perform actions on files with SYSTEM privileges.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00163 Published 2026-04-16 Fixed in 9.3.0 CWE-669

TI-2026-29673 CVE-2026-41034 · GHSA-28j6-w975-f9x7

Out-of-bounds read in Ascensio ONLYOFFICE DocumentServer

LOW 23

ONLYOFFICE DocumentServer before 9.3.0 has an untrusted pointer dereference in XLS processing/conversion (via pictFmla.cbBufInCtlStm and other vectors), leading to an information leak and ASLR bypass.

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.00295 Published 2026-04-16 Fixed in 9.3.0 CWE-125

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0