403 matches found
OneNoteAnalyzer
OneNoteAnalyzer A C based tool for analyzing malicious OneNote documents Description Recently we came across few malicious OneNote Documents been distributed in-the-wild by various threat actors. This gave us an idea to develop "OneNoteAnalyzer" which would help in analysing such malicious OneNot...
Microsoft Office OneNote Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network...
CABTrap_OneNote2007
CABTrapOneNote2007 Microsoft Office Onenote 2007 CVE-2014-2815 ".ONEPKG" File Directory Traversal Vulnerability Leads to Arbitrary Code Execution Microsoft Office Onenote 2007 CVE-2014-2815 ".ONEPKG" File Directory Traversal Vulnerability Leads to Arbitrary Code Execution OneNote 2007 is prone to...
pyOneNote
pyOneNote pyOneNote is a lightweight python library to read OneNote files. The main goal of this parser is to allow cybersecurity analyst to extract useful information from OneNote files. Installing the parser Installing the latest development pip install -U...
Security Updates for Microsoft OneNote Products C2R (October 2026)
The Microsoft OneNote Products are missing a security update. It is, therefore, affected by a use after free vulnerability in Microsoft Office OneNote that allows an authorized attacker to elevate privileges locally. CVE-2026-96997 Note that Nessus has not tested for this issue but has instead...
CVE-2026-97781
Improper neutralization of special elements used in a command 'command injection' in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network...
CVE-2026-96997
Use after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally...
CVE-2026-102858
Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network...
EUVD-2026-100460
Improper neutralization of special elements used in a command 'command injection' in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network...
CVE-2026-97781
A command injection vulnerability exists in Microsoft Office OneNote due to the improper neutralization of special elements used in a command. This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated with a High severity (CVSS 8.8) and ...
EUVD-2026-99806
Use after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally...
CVE-2026-96997
A Use after free vulnerability in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally . The issue impacts the OneNote component and is assigned a CVSS score of 7.8 (High) . Microsoft has released security updates to address this vulnerability; users are recommende...
EUVD-2026-99041
Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network...
CVE-2026-102858
A heap-based buffer overflow exists in Microsoft Office OneNote , which may allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is associated with CWE-122 . While the impact is high, user interaction is required for exploitation. Official remediation ...
Microsoft Office OneNote Elevation of Privilege Vulnerability
Use after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally...
Microsoft Office OneNote Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network...
Microsoft Office OneNote Remote Code Execution Vulnerability
Improper neutralization of special elements used in a command 'command injection' in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network...
Microsoft Office: CVE-2026-96997: Microsoft Office OneNote Elevation of Privilege Vulnerability
Use after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally...
