OneNote Information Disclosure

The vulnerability of the Microsoft OneNote note-taking software lies in the lack of protection for sensitive data. Exploiting this vulnerability allows a malicious actor, operating remotely, to obtain confidential information through a specially created OneNote file...

PT-2016-2574

Name of the Vulnerable Software and Affected Versions Microsoft OneNote versions 2007 SP3 through 2016 for Mac Description The issue is related to the improper disclosure of memory contents in Microsoft OneNote, allowing remote attackers to obtain sensitive information via a crafted OneNote file...

CVE-2014-2815: Undefined Security Weakness

Microsoft OneNote 2007 SP3 allows remote attackers to execute arbitrary code via a crafted OneNote file that triggers creation of an executable file in a startup folder, aka "OneNote Remote Code Execution Vulnerability."...