Lucene search
+L

370 matches found

RedhatCVE
RedhatCVE
•added 2025/02/05 7:43 a.m.•19 views

CVE-2024-41159

A library injection vulnerability exists in Microsoft OneNote 16.83 for macOS. A specially crafted library can leverage OneNote's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use...

7.1CVSS6.9AI score0.00841EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2025/01/27 12:00 a.m.•15 views

The vulnerability of the Microsoft OneNote note-taking software for the Mac OS allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft OneNote software for the Mac OS relates to incorrect restrictions on file names and other resources. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code...

7.8CVSS8.1AI score0.0065EPSS
SaveExploits0References2
NVD
NVD
•added 2025/01/14 6:16 p.m.•20 views

CVE-2025-21402

Microsoft Office OneNote Remote Code Execution Vulnerability...

7.8CVSS0.0065EPSS
SaveExploits0References1
OSV
OSV
•added 2025/01/14 6:16 p.m.•12 views

CVE-2025-21402

Microsoft Office OneNote Remote Code Execution Vulnerability...

7.8CVSS7.4AI score0.0065EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/14 6:04 p.m.•9 views

CVE-2025-21402 Microsoft Office OneNote Remote Code Execution Vulnerability

...

7.8CVSS7AI score0.0065EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/14 6:04 p.m.•36 views

CVE-2025-21402 Microsoft Office OneNote Remote Code Execution Vulnerability

...

7.8CVSS0.0065EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/14 6:04 p.m.•167 views

CVE-2025-21402

CVE-2025-21402 is a Microsoft Office OneNote remote code execution vulnerability. The NVD entry notes a HIGH risk with CVSS 3.1: Local attack vector, low attack complexity, user interaction required, and impact to confidentiality, integrity, and availability. Multiple connected sources corroborat...

7.8CVSS7.8AI score0.0065EPSS
SaveExploits0References1Affected Software3
Microsoft CVE
Microsoft CVE
•added 2025/01/14 8:00 a.m.•37 views

Microsoft Office OneNote Remote Code Execution Vulnerability

...

7.8CVSS7.1AI score0.0065EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/01/14 12:00 a.m.•11 views

PT-2025-1292

Name of the Vulnerable Software and Affected Versions Microsoft Office OneNote affected versions not specified Description The issue is related to incorrect restriction of file names and other resources in Microsoft Office OneNote. This can allow an attacker to execute arbitrary code...

7.8CVSS7.5AI score0.0065EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/14 12:00 a.m.•1 views

CVE-2025-21402: Improper Restriction of Names for Files and Other Resources

Microsoft Office OneNote Remote Code Execution Vulnerability...

7.8CVSS5.8AI score0.0065EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/01/14 12:00 a.m.•15 views

Microsoft Office 安全漏洞

Microsoft Office OneNote is a set of tools for free-form information access and multi-user collaboration. A code execution vulnerability exists in Microsoft Office OneNote, which can be exploited by an attacker to execute arbitrary code on a system...

7.8CVSS7.8AI score0.0065EPSS
SaveExploits0References3
OSV
OSV
•added 2024/12/18 11:15 p.m.•14 views

CVE-2024-41159

A library injection vulnerability exists in Microsoft OneNote 16.83 for macOS. A specially crafted library can leverage OneNote's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use...

7.1CVSS5.8AI score0.00841EPSS
SaveExploits1References2
NVD
NVD
•added 2024/12/18 11:15 p.m.•45 views

CVE-2024-41159

A library injection vulnerability exists in Microsoft OneNote 16.83 for macOS. A specially crafted library can leverage OneNote's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use...

7.1CVSS0.00841EPSS
SaveExploits1References2
CVE
CVE
•added 2024/12/18 10:39 p.m.•150 views

CVE-2024-41159

Microsoft OneNote for macOS CVE-2024-41159 is a library-injection vulnerability where a malicious library loaded via relative paths can leverage OneNote’s entitlements and permissions to bypass protections. Talos documents show OneNote loads libraries through relative paths and, despite Hardened ...

7.1CVSS6.9AI score0.00841EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
•added 2024/12/18 10:39 p.m.•17 views

CVE-2024-41159

A library injection vulnerability exists in Microsoft OneNote 16.83 for macOS. A specially crafted library can leverage OneNote's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use...

7.1CVSS6.9AI score0.00841EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/12/18 10:39 p.m.•29 views

CVE-2024-41159

A library injection vulnerability exists in Microsoft OneNote 16.83 for macOS. A specially crafted library can leverage OneNote's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use...

7.1CVSS0.00841EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/18 12:00 a.m.•3 views

CVE-2024-41159: Improper Verification of Cryptographic Signature

A library injection vulnerability exists in Microsoft OneNote 16.83 for macOS. A specially crafted library can leverage OneNote's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use...

7.1CVSS5.9AI score0.00841EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2024/09/17 12:00 a.m.•14 views

The vulnerability of the Microsoft OneNote software for the Mac OS allows a hacker to circumvent existing security restrictions.

The vulnerability of the Microsoft OneNote note-taking software for the Mac OS is related to improper verification of the cryptographic signature. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions by introducing malicious libraries...

7.1CVSS5.4AI score0.00841EPSS
SaveExploits1References5Affected Software1
The Hacker News
The Hacker News
•added 2024/09/03 4:01 a.m.•54 views

New Flaws in Microsoft macOS Apps Could Allow Hackers to Gain Unrestricted Access

Eight vulnerabilities have been uncovered in Microsoft applications for macOS that an adversary could exploit to gain elevated privileges or access sensitive data by circumventing the operating system's permissions-based model, which revolves around the Transparency, Consent, and Control TCC...

7.3AI score
SaveExploits0
CNNVD
CNNVD
•added 2024/08/19 12:00 a.m.•16 views

Microsoft Office 数据伪造问题漏洞

Microsoft Office is an office software suite product of Microsoft Corporation USA. Commonly used components of this product include Word, Excel, Access, Powerpoint, FrontPage, and so on. Microsoft Office version 16.83 suffers from a Data Forgery Issue vulnerability that stems from a specially...

7.1CVSS6.5AI score0.00841EPSS
SaveExploits1References3
Rows per page
Query Builder