ON
Product
OneNote
by Microsoft · last CVE Mar 13, 2026
On CISA KEVExploited in the wild
16
CVEs
1
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 8Medium 4Low 0
Watch

Add OneNote to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2007-0671
In wildKEV
8.8
43%
Feb 3
Microsoft Office Excel Remote Code Execution Vulnerability
Affected: 2003
CVE-2017-8509
8.8
18%
Jun 15
A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability"
Affected: 2010
CVE-2014-2815
8.8
44%
Aug 12
Microsoft OneNote 2007 SP3 allows remote attackers to execute arbitrary code via a crafted OneNote file that triggers creation of an executable file in a startup folder, aka…
Affected: 2007
CVE-2025-29822
7.8
1%
Apr 8
Incomplete list of disallowed inputs in Microsoft Office OneNote allows an unauthorized attacker to bypass a security feature locally
Affected: 2016
CVE-2025-21402
7.8
1%
Jan 14
Microsoft Office OneNote Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2017-0197
7.8
19%
Apr 12
Microsoft OneNote 2007 SP3 and Microsoft OneNote 2010 SP2 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office DLL Loading Vulnerability."
Affected: 2007; 2010
CVE-2026-26133
7.1
0%
Mar 13
M365 Copilot Information Disclosure Vulnerability
Affected: before 16.0.19725.20142
CVE-2024-41159
7.1
1%
Dec 18
A library injection vulnerability exists in Microsoft OneNote 16.83 for macOS
Affected: 16.83 for macOS
Showing 8