PT-2026-33272 · Onlyoffice · Onlyoffice Document Server

Published 2026-04-16 · Updated 2026-04-16 · CVE-2026-41034

Positive Technologies (AI Summary)

CVSS v3.1

5.0

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions ONLYOFFICE DocumentServer versions prior to 9.3.0

Description An untrusted pointer dereference exists during XLS processing and conversion, specifically involving the pictFmla.cbBufInCtlStm variable and other vectors. This issue can lead to an information leak and the bypass of Address Space Layout Randomization (ASLR), a security technique used to prevent exploitation of memory corruption by randomizing the memory addresses used by system processes.

Recommendations Update to version 9.3.0.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2026-41034

Affected Products

Onlyoffice Document Server

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-41034 · Security Note
• https://github.com/ONLYOFFICE/DocumentServer/blob/master/CHANGELOG.md · Note
• https://twitter.com/CVEnew/status/2044701560790544769 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2044738263139647531 · Twitter Post