← Back

Core

core

Vendor: Onlyoffice • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Onlyoffice
2Core
Document Server
Nov 21, 2024
Jun 2, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Onlyoffice Document Server v6.0.0 and below and Core 6.1.0.26 and below were discovered to contain a heap overflow via the component DesktopEditor/fontengine/fontconverter/FontFileBase.h.
1Onlyoffice
2Core
Document Server
Nov 21, 2024
Jun 2, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Onlyoffice Document Server v6.0.0 and below and Core 6.1.0.26 and below were discovered to contain a stack overflow via the component DesktopEditor/common/File.cpp.