CVE-2023-33140

CVE-2023-33140 concerns Microsoft OneNote spoofing. Connected sources provide concrete details: OneNote (example build 2305, 16.0.16501.20074 64-bit) is vulnerable to a spoofing vulnerability that requires a user to open a crafted file and click a crafted URL to spoof the UI. The vulnerability’s ...

CVE-2025-29822

CVE-2025-29822 affects Microsoft OneNote (Office) with an incomplete input validation in OneNote that allows local security feature bypass. The issue is classified as high severity (CVSS 3.1: 7.8; Local attack, no privileges required, user interaction required; impacts Confidentiality, Integrity,...

CVE-2025-21402

CVE-2025-21402 is a Microsoft Office OneNote remote code execution vulnerability. The NVD entry notes a HIGH risk with CVSS 3.1: Local attack vector, low attack complexity, user interaction required, and impact to confidentiality, integrity, and availability. Multiple connected sources corroborat...

CVE-2026-26133

CVE-2026-26133 involves an AI command injection vulnerability in Microsoft 365 Copilot that can lead to unauthorized disclosure of information over a network. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N) indicates a network-accessible issue with no privileges required but user intera...