Vulnerabilities (CVE)

Filtered by vendor Microsoft Subscribe
Filtered by product Onenote
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2014-2815 1 Microsoft 1 Onenote 2021-12-16 9.3 HIGH 8.8 HIGH
Microsoft OneNote 2007 SP3 allows remote attackers to execute arbitrary code via a crafted OneNote file that triggers creation of an executable file in a startup folder, aka "OneNote Remote Code Execution Vulnerability."
CVE-2017-8509 1 Microsoft 8 Office, Office Compatibility Pack, Office Web Apps and 5 more 2019-10-03 9.3 HIGH 8.8 HIGH
A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-8510, CVE-2017-8511, CVE-2017-8512, CVE-2017-0260, and CVE-2017-8506.
CVE-2017-0197 1 Microsoft 1 Onenote 2017-07-11 9.3 HIGH 7.8 HIGH
Microsoft OneNote 2007 SP3 and Microsoft OneNote 2010 SP2 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office DLL Loading Vulnerability."