Known vulnerabilities in Microsoft OneNote

Vendor: Microsoft
Software: Microsoft OneNote
Software CPE: cpe:2.3:a:microsoft:microsoft_onenote:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 4
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft OneNote Microsoft OneNote is affected by 4 known vulnerabilities: 2 high, 1 medium, 1 low Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU107290 - Incomplete List of Disallowed Inputs
CVE-2025-29822		 CWE-184 High
No
No
 - 09.04.2025 SB2025040958
#VU79575 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2023-36769		 CWE-451 Medium
No
No
 15.0.5579.1000, 16.0.5408.1000 16.08.2023 SB2023081611
#VU6294 - Untrusted Search Path
CVE-2017-0197		 CWE-426 High
No
No
 - 12.04.2017 SB2017041209
SB2017041108
#VU295 - Memory corruption
CVE-2016-3315		 CWE-119 Low
No
No
 - 10.08.2016 SB2016081008
SB2016082203
SB2016080929