PT-2026-33272 · Onlyoffice · Onlyoffice Document Server

CVE-2026-41034 · Published 2026-04-16 · Updated 2026-04-16

Positive Technologies (AI Summary)

CVSS v3.1

5.0

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions ONLYOFFICE DocumentServer versions prior to 9.3.0

Description An untrusted pointer dereference exists during XLS processing and conversion, specifically involving the pictFmla.cbBufInCtlStm variable and other vectors. This issue can lead to an information leak and the bypass of Address Space Layout Randomization (ASLR), a security technique used to prevent exploitation of memory corruption by randomizing the memory addresses used by system processes.

Recommendations Update to version 9.3.0.

Exploit

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2026-41034

Affected Products

Onlyoffice Document Server

References · 6

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/41xxx/CVE-2026-41034.json · Exploit
• https://osv.dev/vulnerability/CVE-2026-41034 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-41034 · Security Note
• https://github.com/ONLYOFFICE/DocumentServer/blob/master/CHANGELOG.md · Note
• https://twitter.com/CVEnew/status/2044701560790544769 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2044738263139647531 · Twitter Post