397 matches found
pyOneNote
pyOneNote pyOneNote is a lightweight python library to read OneNote files. The main goal of this parser is to allow cybersecurity analyst to extract useful information from OneNote files. Installing the parser Installing the latest development pip install -U...
OneNoteAnalyzer
OneNoteAnalyzer A C based tool for analyzing malicious OneNote documents Description Recently we came across few malicious OneNote Documents been distributed in-the-wild by various threat actors. This gave us an idea to develop "OneNoteAnalyzer" which would help in analysing such malicious OneNot...
CABTrap_OneNote2007
CABTrapOneNote2007 Microsoft Office Onenote 2007 CVE-2014-2815 ".ONEPKG" File Directory Traversal Vulnerability Leads to Arbitrary Code Execution Microsoft Office Onenote 2007 CVE-2014-2815 ".ONEPKG" File Directory Traversal Vulnerability Leads to Arbitrary Code Execution OneNote 2007 is prone to...
Security Updates for Microsoft OneNote Products C2R (October 2026)
The Microsoft OneNote Products are missing a security update. It is, therefore, affected by a use after free vulnerability in Microsoft Office OneNote that allows an authorized attacker to elevate privileges locally. CVE-2026-96997 Note that Nessus has not tested for this issue but has instead...
CVE-2026-97781
Improper neutralization of special elements used in a command 'command injection' in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network...
CVE-2026-96997
Use after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally...
CVE-2026-102858
Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network...
EUVD-2026-100460
Improper neutralization of special elements used in a command 'command injection' in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network...
CVE-2026-97781
A command injection vulnerability exists in Microsoft Office OneNote due to the improper neutralization of special elements used in a command. This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated with a High severity (CVSS 8.8) and ...
CVE-2026-96997
A Use after free vulnerability in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally . The issue impacts the OneNote component and is assigned a CVSS score of 7.8 (High) . Microsoft has released security updates to address this vulnerability; users are recommende...
EUVD-2026-99041
Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network...
CVE-2026-102858
A heap-based buffer overflow exists in Microsoft Office OneNote , which may allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is associated with CWE-122 . While the impact is high, user interaction is required for exploitation. Official remediation ...
Microsoft Office OneNote Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network...
Microsoft Office OneNote Remote Code Execution Vulnerability
Improper neutralization of special elements used in a command 'command injection' in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network...
Microsoft Office OneNote Elevation of Privilege Vulnerability
Use after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally...
KLA91340 Multiple vulnerabilities in Microsoft Office
Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, spoof user interface, gain privileges, obtain sensitive information, cause denial of service. Below is a complete list of...
CVE-2026-96997: Use After Free
Use after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally...
Microsoft Office: CVE-2026-96997: Microsoft Office OneNote Elevation of Privilege Vulnerability
Use after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally...
