CVE-2026-26133高危 7.1AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.
CVE-2025-29822高危 7.8Incomplete list of disallowed inputs in Microsoft Office OneNote allows an unauthorized attacker to bypass a security feature locally.
CVE-2024-41159高危 7.1A library injection vulnerability exists in Microsoft OneNote 16.83 for macOS. A specially crafted library can leverage OneNote's access pri…
CVE-2023-21721中危 6.5Microsoft OneNote Elevation of Privilege Vulnerability
CVE-2017-8509高危 8.8A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office R…