CVE-2026-55133 Microsoft OneNote Remote Code Execution Vulnerability

...

CVE-2026-55133

CVE-2026-55133 affects Microsoft Office OneNote. The issue is a heap-based buffer overflow in OneNote that can allow a local attacker to execute code on the affected system. CVSSv3.1 indicates ATT&CK: local access, user interaction required, with high impact to confidentiality, integrity, and ava...

CVE-2026-55133 Microsoft OneNote Remote Code Execution Vulnerability

...

Microsoft OneNote Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code locally...

Microsoft多款产品 安全漏洞

Microsoft Excel is a product of the American company Microsoft. Microsoft Excel is a spreadsheet processing software within the Office suite. Microsoft Edge is a web browser that comes with systems running Windows 10 and later versions. Microsoft Word is a word processing software within the Offi...

EUVD-2023-37326

Malicious code in bioql PyPI...

EUVD-2023-40712

Malicious code in bioql PyPI...

EUVD-2024-38898

Malicious code in bioql PyPI...

EUVD-2023-25888

Malicious code in bioql PyPI...

Security Updates for Microsoft OneNote C2R (April 2025)

The Microsoft OneNote Products are missing a security update. It is, therefore, affected by a security feature bypass vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. Th...

Microsoft OneNote Security Feature Bypass Vulnerability (KB5002622)

This host is missing an important security update according to Microsoft KB5002622. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2025-29822 Microsoft OneNote Security Feature Bypass Vulnerability

...

CVE-2025-29822 Microsoft OneNote Security Feature Bypass Vulnerability

...

Microsoft OneNote Security Feature Bypass Vulnerability

Incomplete list of disallowed inputs in Microsoft Office OneNote allows an unauthorized attacker to bypass a security feature locally...

Security Updates for Microsoft OneNote Products (April 2025)

The Microsoft OneNote Products are missing a security update. They are, therefore, affected by a security feature bypass vulnerability. An attacker can exploit this and bypass the security feature and perform unauthorized actions compromising the integrity of the system/application. Note that...

CVE-2024-41159

A library injection vulnerability exists in Microsoft OneNote 16.83 for macOS. A specially crafted library can leverage OneNote's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use...

The vulnerability of the Microsoft OneNote note-taking software for the Mac OS allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft OneNote software for the Mac OS relates to incorrect restrictions on file names and other resources. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code...

CVE-2024-41159

A library injection vulnerability exists in Microsoft OneNote 16.83 for macOS. A specially crafted library can leverage OneNote's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use...

CVE-2024-41159

A library injection vulnerability exists in Microsoft OneNote 16.83 for macOS. A specially crafted library can leverage OneNote's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use...

CVE-2024-41159

A library injection vulnerability exists in Microsoft OneNote 16.83 for macOS. A specially crafted library can leverage OneNote's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use...