CVE-2026-41034 MEDIUM

CVE-2026-41034

Vendor Ascensio

Product ONLYOFFICE DocumentServer

Weakness CWE-125

Published April 16, 2026

Last update April 16, 2026

View on NVD All CVEs

CVSS base score

5.0/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality Low

Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

What the vulnerability does

01Description

ONLYOFFICE DocumentServer before 9.3.0 has an untrusted pointer dereference in XLS processing/conversion (via pictFmla.cbBufInCtlStm and other vectors), leading to an information leak and ASLR bypass.

Key dates

02Disclosure timeline

April 16, 2026 CVE published

April 16, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2026-41034 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/125.html