46 matches found
CVE-2026-97781
Improper neutralization of special elements used in a command 'command injection' in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network...
CVE-2026-96997
Use after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally...
CVE-2026-102858
Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network...
CVE-2026-97781
A command injection vulnerability exists in Microsoft Office OneNote due to the improper neutralization of special elements used in a command. This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated with a High severity (CVSS 8.8) and ...
EUVD-2026-100460
Improper neutralization of special elements used in a command 'command injection' in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network...
CVE-2026-96997
A Use after free vulnerability in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally . The issue impacts the OneNote component and is assigned a CVSS score of 7.8 (High) . Microsoft has released security updates to address this vulnerability; users are recommende...
EUVD-2026-99041
Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network...
CVE-2026-102858
A heap-based buffer overflow exists in Microsoft Office OneNote , which may allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is associated with CWE-122 . While the impact is high, user interaction is required for exploitation. Official remediation ...
Microsoft Office OneNote Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network...
Microsoft Office OneNote Remote Code Execution Vulnerability
Improper neutralization of special elements used in a command 'command injection' in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network...
Microsoft Office OneNote Elevation of Privilege Vulnerability
Use after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally...
CVE-2026-97781: Improper Neutralization of Special Elements used in a Command
Improper neutralization of special elements used in a command 'command injection' in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network...
CVE-2026-102858: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network...
PT-2026-111943
Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network...
PT-2026-113218
Name of the Vulnerable Software and Affected Versions Microsoft Office OneNote affected versions not specified Description Improper neutralization of special elements used in a command, known as command injection, allows an unauthorized attacker to execute code over a network. Recommendations At...
CVE-2026-96997: Use After Free
Use after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally...
CVE-2026-55133
Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code locally...
EUVD-2026-44219
Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code locally...