NewsSANS ISC Diary
OneNote File Extraction, (Sun, Nov 1st)
Teaser from the source
Recently, I had to extract embedded files from a set of OneNote files (extension .one).
This is the RSS-feed teaser. Read the full article at the original source.
Read at SANS ISC DiaryMore on OneNote
Other advisories
- HighCVE-2026-96997Verwendung nach Freigabe in Microsoft Office OneNote ermöglicht einem autorisierten Angreifer die lokale Rechteausweitung.
- HighCVE-2026-96997Microsoft Office OneNote Elevation of Privilege Vulnerability
- HighCVE-2026-97781Microsoft Office OneNote Remote Code Execution Vulnerability
- HighCVE-2026-102858Microsoft Office OneNote Remote Code Execution Vulnerability
- Not ratedosv:CVE-2026-46671Rust OneNote File Parser: Path traversal in `Parser::parse_notebook` allows reading files outside the notebook directory
- MediumCVE-2026-46671Msiemens Onenote.rs: Pfadüberschreitung (Path Traversal)
- MediumCVE-2026-46671Msiemens Onenote.rs: Pfadüberschreitung (Path Traversal)
- HighCVE-2026-55133Microsoft OneNote Remote Code Execution Vulnerability
Source: https://isc.sans.edu/diary/rss/33478
ID