Microsoft Onenote vulnerabilities
3 vulnerabilities
Known vulnerabilities in Microsoft Onenote, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-21402microsoftmicrosoft office ltsc for mac 2021+5
EPSS score0.65%
Microsoft Office OneNote Remote Code Execution VulnerabilityCVE-2025-29822microsoftmicrosoft 365 apps for enterprise+10EPSS score0.82%
Incomplete list of disallowed inputs in Microsoft Office OneNote allows an unauthorized attacker to bypass a security feature locally.CVE-2026-26133microsoft365_copilot+29EPSS score0.56%
AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.