Oleg Korshul

3 exploits Active since Jun 2022
CVE-2022-29776 WRITEUP CRITICAL WRITEUP
Onlyoffice Core < 6.1.0.26 - Out-of-Bounds Write
Onlyoffice Document Server v6.0.0 and below and Core 6.1.0.26 and below were discovered to contain a stack overflow via the component DesktopEditor/common/File.cpp.
CVSS 9.8
CVE-2022-29777 WRITEUP CRITICAL WRITEUP
Onlyoffice Core < 6.1.0.26 - Out-of-Bounds Write
Onlyoffice Document Server v6.0.0 and below and Core 6.1.0.26 and below were discovered to contain a heap overflow via the component DesktopEditor/fontengine/fontconverter/FontFileBase.h.
CVSS 9.8
CVE-2023-30186 WRITEUP CRITICAL WRITEUP
Onlyoffice Document Server < 7.3.2 - Use After Free
A use after free issue discovered in ONLYOFFICE DocumentServer 4.0.3 through 7.3.2 allows remote attackers to run arbitrary code via crafted JavaScript file.
CVSS 9.8