Product by Microsoft
Microsoft OneNote
16 known vulnerabilities in Microsoft OneNote (Microsoft), 1 of them actively exploited (CISA KEV).
Key figures
16
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2007-0671 | Microsoft Office Excel Remote Code Execution Vulnerability In CISA KEValso in 13 other products | 8.8 | |
| High | CVE-2014-2815 | Microsoft OneNote: Remote Code Execution | 8.8 | |
| High | CVE-2017-8509 | Microsoft Office: Remote Code Execution | 8.8 | |
| High | CVE-2017-0197 | Microsoft Office: Code Execution | 7.8 | |
| Medium | CVE-2016-3315 | Microsoft OneNote: Information Disclosure | 5.5 | |
| Medium | CVE-2023-33140 | Microsoft OneNote Spoofing Vulnerability | 6.5 | |
| Not rated | CVE-2004-0200 | Microsoft picture_it: Buffer Overflow | — | |
| Not rated | CVE-2008-3068 | Microsoft Office: security vulnerability | — | |
| Not rated | CVE-2015-2503 | Microsoft Excel: Privilege Escalation | — | |
| Not rated | CVE-2006-3877 | Microsoft Office: Code Execution | — | |
| High | CVE-2025-29822 | Microsoft OneNote Security Feature Bypass Vulnerability | 7.8 | |
| High | CVE-2024-41159 | Microsoft OneNote: Improper Verification of Cryptographic Signature | 7.1 | |
| High | CVE-2025-21402 | Microsoft Office OneNote Remote Code Execution Vulnerability | 7.8 | |
| Medium | CVE-2023-21721 | Microsoft OneNote Elevation of Privilege Vulnerability | 6.5 | |
| High | CVE-2026-26133 | M365 Copilot Information Disclosure Vulnerability | 7.1 | |
| Medium | CVE-2023-36769 | Microsoft OneNote Spoofing Vulnerability | 4.6 |