OneNoteAnalyzer

OneNoteAnalyzer Cベースの悪意のあるOneNote文書を分析するツール 説明 最近、さまざまな脅威アクターによって実際に配布されている悪意のあるOneNote文書をいくつか目にしました。これがきっかけで、それらを実行せずに分析できる「OneNoteAnalyzer」を開発するアイデアが浮かびました。それでは、このツールが提供する機能を見てみましょう。 機能 悪意のあるOneNote文書のファイルパスを指定すると、OneNoteAnalyzerは以下を抽出します。 OneNote文書からの添付ファイル（実際の添付パス、ファイル名、サイズを含む）...

pyOneNote

pyOneNote pyOneNote es una biblioteca ligera de Python para leer archivos de OneNote. El objetivo principal de este analizador es permitir a los analistas de ciberseguridad extraer información útil de los archivos de OneNote. Instalación del analizador Instalación de la última versión en desarrol...

CABTrap_OneNote2007

CABTrapOneNote2007 Microsoft Office OneNote 2007 CVE-2014-2815 ".ONEPKG" 文件目录遍历漏洞导致任意代码执行 Microsoft Office OneNote 2007 CVE-2014-2815 ".ONEPKG" 文件目录遍历漏洞导致任意代码执行 OneNote 2007 存在一个漏洞，该漏洞会导致程序解压 ".onepkg" 文件中包含的文件（该文件使用 "MS CAB 格式"），通过使用文件名中的父目录 ".." 将其解压到系统中的任意位置。 由于 OneNote...

CVE-2026-46671 Rust OneNote File Parser: Path traversal in `Parser::parse_notebook` allows reading files outside the notebook directory

Rust OneNote File Parser is a parser for Microsoft OneNote files implemented in Rust. Prior to version 1.1.1, a maliciously crafted .onetoc2 table-of-contents file can cause Parser::parsenotebook to open arbitrary files on the host filesystem outside the notebook's directory. The parser reads ent...

CVE-2026-46671

This CVE concerns the Rust-based onenote_parser. Prior to version 1.1.1, a crafted .onetoc2 file could cause Parser::parse_notebook to open files outside the notebook directory by joining entry names with the notebook base, without ensuring relative paths. The issue allows file-existence probing ...

CVE-2026-55133

Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code locally...

CVE-2026-55133 Microsoft OneNote Remote Code Execution Vulnerability

...

CVE-2026-55133 Microsoft OneNote Remote Code Execution Vulnerability

...

CVE-2026-55133

CVE-2026-55133 affects Microsoft Office OneNote. The issue is a heap-based buffer overflow in OneNote that can allow a local attacker to execute code on the affected system. CVSSv3.1 indicates ATT&CK: local access, user interaction required, with high impact to confidentiality, integrity, and ava...

Microsoft OneNote Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code locally...

Rust OneNote File Parser: Path traversal in `Parser::parse_notebook` allows reading files outside the notebook directory

Impact A maliciously crafted .onetoc2 table-of-contents file can cause Parser::parsenotebook to open arbitrary files on the host filesystem outside the notebook's directory. The parser reads entry names listed inside the .onetoc2 and joins them against the notebook's base directory without...

GHSA-4J5M-WC25-PVH7 Rust OneNote File Parser: Path traversal in `Parser::parse_notebook` allows reading files outside the notebook directory

Impact A maliciously crafted .onetoc2 table-of-contents file can cause Parser::parsenotebook to open arbitrary files on the host filesystem outside the notebook's directory. The parser reads entry names listed inside the .onetoc2 and joins them against the notebook's base directory without...

PT-2026-42595

Impact A maliciously crafted .onetoc2 table-of-contents file can cause Parser::parse notebook to open arbitrary files on the host filesystem outside the notebook's directory. The parser reads entry names listed inside the .onetoc2 and joins them against the notebook's base directory without...

CVE-2026-22810

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Versions prior to 3.5.7 contain a path traversal vulnerability in the importer which allows overwriting arbitrary files on disk. The OneNote converter does not sanitize the names of embedded...

Directory Traversal

Overview @joplin/onenote-converter is an Used to import a OneNote archive into Joplin Affected versions of this package are vulnerable to Directory Traversal via the OneNote importer. An attacker can overwrite arbitrary files on disk by supplying a crafted .one file containing specially crafted...

CVE-2026-22810

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Versions prior to 3.5.7 contain a path traversal vulnerability in the importer which allows overwriting arbitrary files on disk. The OneNote converter does not sanitize the names of embedded...

CVE-2026-22810 Joplin: Path traversal in OneNote importer allows overwriting arbitrary files

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Versions prior to 3.5.7 contain a path traversal vulnerability in the importer which allows overwriting arbitrary files on disk. The OneNote converter does not sanitize the names of embedded...

CVE-2026-22810 Joplin: Path traversal in OneNote importer allows overwriting arbitrary files

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Versions prior to 3.5.7 contain a path traversal vulnerability in the importer which allows overwriting arbitrary files on disk. The OneNote converter does not sanitize the names of embedded...

CVE-2026-22810

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Versions prior to 3.5.7 contain a path traversal vulnerability in the importer which allows overwriting arbitrary files on disk. The OneNote converter does not sanitize the names of embedded...

EUVD-2026-30806

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Versions prior to 3.5.7 contain a path traversal vulnerability in the importer which allows overwriting arbitrary files on disk. The OneNote converter does not sanitize the names of embedded...