CVE-2023-33140

🗓️ 13 Jun 2023 23:26:26Reported by microsoftType

cve🔗 web.nvd.nist.gov👁 202 Views🌐 WEB

Microsoft OneNote Spoofing Vulnerability CVE-2023-3314

Reporter	Title	Published	Views	Family All 18
0day.today	Microsoft OneNote (Version 2305 Build 16.0.16501.20074) 64-bit - Spoofing Vulnerability	26 Jun 202300:00	–	zdt
Information Security Automation	Microsoft Patch Tuesday June 2023: Edge type confusion, Git RCE, OneNote Spoofing, PGM RCE, Exchange RCE, SharePoint EoP	25 Jun 202300:35	–	avleonov
BDU FSTEC	The vulnerability of the Microsoft OneNote note-taking software, related to errors in information presentation on the user interface, allows a hacker to perform spoofing attacks.	18 Jul 202300:00	–	bdu_fstec
Circl	CVE-2023-33140	14 Jun 202310:24	–	circl
CNNVD	Microsoft Office OneNote 安全漏洞	13 Jun 202300:00	–	cnnvd
Cvelist	CVE-2023-33140 Microsoft OneNote Spoofing Vulnerability	13 Jun 202323:26	–	cvelist
Exploit DB	Microsoft OneNote (Version 2305 Build 16.0.16501.20074) 64-bit - Spoofing	22 Jun 202300:00	–	exploitdb
EUVD	EUVD-2023-37326	3 Oct 202520:07	–	euvd
Kaspersky	KLA50318 Multiple vulnerabilities in Microsoft Office	13 Jun 202300:00	–	kaspersky
Microsoft CVE	Microsoft OneNote Spoofing Vulnerability	13 Jun 202307:00	–	mscve

NVD

Vulners

CNA

Node

microsoft onenoteMatch-

[
  {
    "vendor": "Microsoft",
    "product": "Microsoft OneNote for Universal",
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "16.0.0",
        "lessThan": "16.0.14326.21450",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33140
github	www.github.com/WlX-33/PoC-for-CVE/blob/main/CVE-2023-33140/Microsoft%20OneNote%20(Version%202305%20Build%2016.0.16501.20074)%2064-bit%20-%20Spoofing%20Vulnerability.txt

Parameter	Position	Path	Description	CWE
kurec.badass	path	attacker.com/kurec.badass	URL used in crafted file to fetch malicious payload from attacker-controlled server	CWE-290

17 Jun 2026 06:01Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.16.5

EPSS0.01649

SSVC

CWE-290