Microsoft Office OneNote Code Execution Vulnerability (CNVD-2025-04195)

Microsoft Office OneNote is a set of tools for free-form information access and multi-user collaboration. A code execution vulnerability exists in Microsoft Office OneNote, which can be exploited by an attacker to execute arbitrary code on a system...

CVE-2024-41159

A library injection vulnerability exists in Microsoft OneNote 16.83 for macOS. A specially crafted library can leverage OneNote's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use...

CVE-2025-21402

Microsoft Office OneNote Remote Code Execution Vulnerability...

CVE-2025-21402

Microsoft Office OneNote Remote Code Execution Vulnerability...

CVE-2025-21402 Microsoft Office OneNote Remote Code Execution Vulnerability

...

CVE-2025-21402 Microsoft Office OneNote Remote Code Execution Vulnerability

...

CVE-2025-21402

CVE-2025-21402 is a Microsoft Office OneNote remote code execution vulnerability. The NVD entry notes a HIGH risk with CVSS 3.1: Local attack vector, low attack complexity, user interaction required, and impact to confidentiality, integrity, and availability. Multiple connected sources corroborat...

Microsoft Office OneNote Remote Code Execution Vulnerability

...

Microsoft Office 安全漏洞

Microsoft Office OneNote is a set of tools for free-form information access and multi-user collaboration. A code execution vulnerability exists in Microsoft Office OneNote, which can be exploited by an attacker to execute arbitrary code on a system...

PT-2025-1292

Name of the Vulnerable Software and Affected Versions Microsoft Office OneNote affected versions not specified Description The issue is related to incorrect restriction of file names and other resources in Microsoft Office OneNote. This can allow an attacker to execute arbitrary code...

CVE-2024-41159

A library injection vulnerability exists in Microsoft OneNote 16.83 for macOS. A specially crafted library can leverage OneNote's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use...

CVE-2024-41159

A library injection vulnerability exists in Microsoft OneNote 16.83 for macOS. A specially crafted library can leverage OneNote's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use...

CVE-2024-41159

A library injection vulnerability exists in Microsoft OneNote 16.83 for macOS. A specially crafted library can leverage OneNote's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use...

CVE-2024-41159

A library injection vulnerability exists in Microsoft OneNote 16.83 for macOS. A specially crafted library can leverage OneNote's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use...

CVE-2024-41159

Microsoft OneNote for macOS CVE-2024-41159 is a library-injection vulnerability where a malicious library loaded via relative paths can leverage OneNote’s entitlements and permissions to bypass protections. Talos documents show OneNote loads libraries through relative paths and, despite Hardened ...

New Flaws in Microsoft macOS Apps Could Allow Hackers to Gain Unrestricted Access

Eight vulnerabilities have been uncovered in Microsoft applications for macOS that an adversary could exploit to gain elevated privileges or access sensitive data by circumventing the operating system's permissions-based model, which revolves around the Transparency, Consent, and Control TCC...

Microsoft Office 数据伪造问题漏洞

Microsoft Office is an office software suite product of Microsoft Corporation USA. Commonly used components of this product include Word, Excel, Access, Powerpoint, FrontPage, and so on. Microsoft Office version 16.83 suffers from a Data Forgery Issue vulnerability that stems from a specially...

Microsoft OneNote for macOS library injection vulnerability

Talos Vulnerability Report TALOS-2024-1975 Microsoft OneNote for macOS library injection vulnerability August 19, 2024 CVE Number CVE-2024-41159 SUMMARY A library injection vulnerability exists in Microsoft OneNote 16.83 for macOS. A specially crafted library can leverage OneNote’s access...

June 11, 2024—KB5039227 (OS Build 20348.2527)

June 11, 2024—KB5039227 OS Build 20348.2527 For information about Windows update terminology, see the article about the types of Windows updates and the monthly quality update types. For an overview of Windows Server 2022, see its update history page. Note Follow @WindowsUpdate to find out when n...

Malicious code in onenote-meetings (npm)

--- -= Per source details. Do not edit below this line.=-...