CVE-2026-26133高 7.1AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.
CVE-2025-29822高 7.8Incomplete list of disallowed inputs in Microsoft Office OneNote allows an unauthorized attacker to bypass a security feature locally.
CVE-2024-41159高 7.1A library injection vulnerability exists in Microsoft OneNote 16.83 for macOS. A specially crafted library can leverage OneNote's access pri…
CVE-2017-8509高 8.8A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office R…