348 matches found
CVE-2025-29822
Incomplete list of disallowed inputs in Microsoft Office OneNote allows an unauthorized attacker to bypass a security feature locally...
CVE-2025-29822 Microsoft OneNote Security Feature Bypass Vulnerability
...
CVE-2025-29822 Microsoft OneNote Security Feature Bypass Vulnerability
...
CVE-2025-29822
CVE-2025-29822 affects Microsoft OneNote (Office) with an incomplete input validation in OneNote that allows local security feature bypass. The issue is classified as high severity (CVSS 3.1: 7.8; Local attack, no privileges required, user interaction required; impacts Confidentiality, Integrity,...
Microsoft OneNote Security Feature Bypass Vulnerability
Incomplete list of disallowed inputs in Microsoft Office OneNote allows an unauthorized attacker to bypass a security feature locally...
Description of the security update for OneNote 2016: April 8, 2025 (KB5002622)
None None...
Microsoft Office 安全漏洞
Microsoft Office is an office software suite product from the American company Microsoft Microsoft. Commonly used components of this product include Word, Excel, Access, Powerpoint, FrontPage, and others. A security vulnerability exists in Microsoft Office. The following products and editions are...
PT-2025-15594 · Microsoft · Office Onenote
Name of the Vulnerable Software and Affected Versions: Microsoft Office OneNote affected versions not specified Description: The issue concerns an incomplete list of disallowed inputs in Microsoft Office OneNote, which allows an unauthorized attacker to bypass a security feature locally...
Security Updates for Microsoft OneNote Products (April 2025)
The Microsoft OneNote Products are missing a security update. They are, therefore, affected by a security feature bypass vulnerability. An attacker can exploit this and bypass the security feature and perform unauthorized actions compromising the integrity of the system/application. Note that...
Microsoft Office OneNote Code Execution Vulnerability (CNVD-2025-04195)
Microsoft Office OneNote is a set of tools for free-form information access and multi-user collaboration. A code execution vulnerability exists in Microsoft Office OneNote, which can be exploited by an attacker to execute arbitrary code on a system...
CVE-2024-41159
A library injection vulnerability exists in Microsoft OneNote 16.83 for macOS. A specially crafted library can leverage OneNote's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use...
The vulnerability of the Microsoft OneNote note-taking software for the Mac OS allows a hacker to execute arbitrary code.
The vulnerability of the Microsoft OneNote software for the Mac OS relates to incorrect restrictions on file names and other resources. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code...
CVE-2025-21402
Microsoft Office OneNote Remote Code Execution Vulnerability...
CVE-2025-21402
Microsoft Office OneNote Remote Code Execution Vulnerability...
CVE-2025-21402 Microsoft Office OneNote Remote Code Execution Vulnerability
...
CVE-2025-21402 Microsoft Office OneNote Remote Code Execution Vulnerability
...
CVE-2025-21402
CVE-2025-21402 is a Microsoft Office OneNote remote code execution vulnerability. The NVD entry notes a HIGH risk with CVSS 3.1: Local attack vector, low attack complexity, user interaction required, and impact to confidentiality, integrity, and availability. Multiple connected sources corroborat...
Microsoft Office OneNote Remote Code Execution Vulnerability
...
PT-2025-1292
Name of the Vulnerable Software and Affected Versions Microsoft Office OneNote affected versions not specified Description The issue is related to incorrect restriction of file names and other resources in Microsoft Office OneNote. This can allow an attacker to execute arbitrary code...
Microsoft Office 安全漏洞
Microsoft Office OneNote is a set of tools for free-form information access and multi-user collaboration. A code execution vulnerability exists in Microsoft Office OneNote, which can be exploited by an attacker to execute arbitrary code on a system...