CABTrap_OneNote2007

CABTrapOneNote2007 Microsoft Office Onenote 2007 CVE-2014-2815 ".ONEPKG" File Directory Traversal Vulnerability Leads to Arbitrary Code Execution Microsoft Office Onenote 2007 CVE-2014-2815 ".ONEPKG" File Directory Traversal Vulnerability Leads to Arbitrary Code Execution OneNote 2007 is prone to...

OneNoteAnalyzer

OneNoteAnalyzer A C based tool for analyzing malicious OneNote documents Description Recently we came across few malicious OneNote Documents been distributed in-the-wild by various threat actors. This gave us an idea to develop "OneNoteAnalyzer" which would help in analysing such malicious OneNot...

pyOneNote

pyOneNote pyOneNote is a lightweight python library to read OneNote files. The main goal of this parser is to allow cybersecurity analyst to extract useful information from OneNote files. Installing the parser Installing the latest development pip install -U...

Security Updates for Microsoft OneNote Products C2R (October 2026)

The Microsoft OneNote Products are missing a security update. It is, therefore, affected by a use after free vulnerability in Microsoft Office OneNote that allows an authorized attacker to elevate privileges locally. CVE-2026-96997 Note that Nessus has not tested for this issue but has instead...

CVE-2026-97781

Improper neutralization of special elements used in a command 'command injection' in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network...

CVE-2026-96997

Use after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally...

CVE-2026-102858

Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network...

EUVD-2026-100460

Improper neutralization of special elements used in a command 'command injection' in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network...

CVE-2026-97781

A command injection vulnerability exists in Microsoft Office OneNote due to the improper neutralization of special elements used in a command. This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated with a High severity (CVSS 8.8) and ...

EUVD-2026-99806

Use after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally...

CVE-2026-96997

A Use after free vulnerability in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally . The issue impacts the OneNote component and is assigned a CVSS score of 7.8 (High) . Microsoft has released security updates to address this vulnerability; users are recommende...

CVE-2026-102858

A heap-based buffer overflow exists in Microsoft Office OneNote , which may allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is associated with CWE-122 . While the impact is high, user interaction is required for exploitation. Official remediation ...

EUVD-2026-99041

Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network...

Microsoft Office OneNote Remote Code Execution Vulnerability

Improper neutralization of special elements used in a command 'command injection' in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network...

Microsoft Office OneNote Elevation of Privilege Vulnerability

Use after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally...

Microsoft Office OneNote Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network...

CVE-2026-102858: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network...

PT-2026-111943

Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network...

PT-2026-113218

Name of the Vulnerable Software and Affected Versions Microsoft Office OneNote affected versions not specified Description Improper neutralization of special elements used in a command, known as command injection, allows an unauthorized attacker to execute code over a network. Recommendations At...

Microsoft Office: CVE-2026-96997: Microsoft Office OneNote Elevation of Privilege Vulnerability

Use after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally...