ON
Product
OneNote
by Microsoft · last CVE Mar 13, 2026
On CISA KEVExploited in the wild
16
CVEs
1
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 8Medium 4Low 0
Watch

Add OneNote to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-33140
6.5
2%
Jun 14
Microsoft OneNote Spoofing Vulnerability
Affected: All versions, or not specified
CVE-2023-21721
6.5
1%
Feb 14
Microsoft OneNote Elevation of Privilege Vulnerability
Affected: before 16.0.16026.20158
CVE-2016-3315
5.5
30%
Aug 9
Microsoft OneNote 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, 2016, and 2016 for Mac allow remote attackers to obtain sensitive information via a crafted OneNote file, aka…
Affected: 2007; 2010; 2013; 2013; 2016
CVE-2023-36769
5.4
0%
Nov 6
Microsoft OneNote Spoofing Vulnerability
Affected: 2013; 2013; 2016; 2019; 2021
Showing 4