OneNote vulnerabilities

2 known vulnerabilities in OneNote from Microsoft. 2 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  OneNote: Improper Verification of Cryptographic Signature

  CVE-2024-41159Dec 18, 2024Microsoft

  A library injection vulnerability exists in Microsoft OneNote 16.83 for macOS. A specially crafted library can leverage OneNote's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger

• 9.3 High severity

  Microsoft Office Excel Remote Code Execution Exploited

  CVE-2007-0671Feb 3, 2007MicrosoftEPSS 44.1%

  Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as demonstrated by Exploit-MSExcel.h in targeted zero