Last updated
All the tools you need to work with text documents, spreadsheets, presentations, and fillable forms on Windows, Linux, and macOS.
$ winget install --id ONLYOFFICE.DesktopEditors --exact --version 9.4.0Run in Command Prompt, PowerShell, or Windows Terminal. Prompts for any agreements.
ONLYOFFICE Desktop Editors uses EXE (Inno Setup). The silent install switches are /VERYSILENT /SUPPRESSMSGBOXES /NORESTART.
DesktopEditors_x64.exe /VERYSILENT /SUPPRESSMSGBOXES /NORESTART
See the full silent install reference for ONLYOFFICE Desktop Editors →
For Intune admins
Automated application patching for Microsoft Intune. Pckgr keeps a curated library of 1,000+ apps continuously up-to-date in your tenant via Microsoft Graph - no manual repackaging, no chasing vendor sites.
Start free 30-day trialNo credit card required.
Create, view and edit text documents, spreadsheets and presentations of any size and complexity.
Work on documents of most popular formats; DOCX, ODT, XLSX, ODS, CSV, PPTX, ODP, etc.
Deal with multiple files within one and the same window thanks to the tab-based user interface.
| Architecture | Type | Scope | Install | Download |
|---|---|---|---|---|
| x86 | EXE Inno Setup | machine | Direct | |
| x64 | EXE Inno Setup | machine | Direct | |
| arm64 | EXE Inno Setup | machine | Direct |
Copy a command tailored to that specific architecture, type, and scope - useful when winget would otherwise pick a different default.
21 known CVEs via NVD
ONLYOFFICE Docs before 9.2.1 allows XSS via the Color theme name. This is related to DocumentServer.
ONLYOFFICE Docs before 9.2.1 allows XSS via the Font field for the Multilevel list settings window. This is related to DocumentServer.
Path Traversal vulnerability in ONLYOFFICE Document Server before v8.0.1 allows a remote attacker to copy arbitrary files by manipulating the fileExt parameter in the /example/editor endpoint, leading to unauthorized access to sensitive files and potential Denial of Service (DoS...
ONLYOFFICE Docs before 8.0.1 allows XSS because a macro is an immediately-invoked function expression (IIFE), and therefore a sandbox escape is possible by directly calling the constructor of the Function object. NOTE: this issue exists because of an incorrect fix for CVE-2021-4...
Memory Exhaustion vulnerability in ONLYOFFICE Document Server 4.0.3 through 7.3.2 allows remote attackers to cause a denial of service via crafted JavaScript file.
An out of bounds memory access vulnerability in ONLYOFFICE DocumentServer 4.0.3 through 7.3.2 allows remote attackers to run arbitrary code via crafted JavaScript file.
A use after free issue discovered in ONLYOFFICE DocumentServer 4.0.3 through 7.3.2 allows remote attackers to run arbitrary code via crafted JavaScript file.
ONLYOFFICE Docs through 7.3 on certain Linux distributions allows local users to gain privileges via a Trojan horse libgcc_s.so.1 in the current working directory, which may be any directory in which an ONLYOFFICE document is located.
See a CVE that affects your fleet? Push the patched version to Intune in one click with Pckgr - automated patching is the only way to keep up.
More from Ascensio System SIA or browse document, editor, excel.