CVE-2025-29822

CVE-2025-29822 affects Microsoft OneNote (Office) with an incomplete input validation in OneNote that allows local security feature bypass. The issue is classified as high severity (CVSS 3.1: 7.8; Local attack, no privileges required, user interaction required; impacts Confidentiality, Integrity,...

CVE-2023-36769

Technical details about CVE-2023-36769 are not publicly provided in the supplied documents beyond generic labeling; no affected products, versions, root cause, or remediation specifics are included here. Monitor for updates.

CVE-2015-2503

CVE-2015-2503 is an Office Elevation of Privilege vulnerability that can be triggered via a crafted web site loaded in Internet Explorer to bypass sandbox protections and gain privileges. The initial CVE entry lists Microsoft Office 2007–2016 products (Word, Excel, PowerPoint, Access, InfoPath, V...

CVE-2016-3315

CVE-2016-3315 relates to Information Disclosure in Microsoft OneNote. Affected products include OneNote versions on Windows (2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, 2016) and OneNote 2016 for Mac. The vulnerability allows remote attackers to obtain sensitive memory contents by opening a crafte...