Onenote

Vendor:

First CVE: Sep 28, 2004 · Active for 21 years

16
Total CVEs
More Total CVEs than 92% of tracked products
1.3
Avg CVEs / Year
Higher CVE frequency than 55% of tracked products
7.7
Avg CVSS
Higher Avg CVSS than 62% of tracked products
6.3%
KEV Rate
Higher KEV Rate than 97% of tracked products

Trends Over Time

The number and severity of CVEs published that impact Onenote over time

Volume of CVEsAvg CVSS Base Score
First CVE
Sep 28, 2004
21 years ago
Most Recent CVE
Mar 16, 2026
130 days ago

CVE Severity & Scoring

Onenote16 CVEs
All CVEs352,294 CVEs
MediumHigh
Attack Vector
Local5 (31.3%)
Network7 (43.8%)
Unknown4 (25.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low12 (75.0%)
High0 (0.0%)
Unknown4 (25.0%)
User Interaction
None2 (12.5%)
Unknown4 (25.0%)
Required10 (62.5%)
Privileges Required
Low3 (18.8%)
High0 (0.0%)
None9 (56.3%)
Unknown4 (25.0%)

Top CVEs

Signals from CVEs in this product scope (16 CVEs).

16 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code v
Feb 3, 20078.884YESNO
Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via
Sep 28, 20049.368NOYES
Microsoft OneNote 2007 SP3 allows remote attackers to execute arbitrary code via a crafted OneNote file that triggers creation of an executable file in a startup folder, aka "OneNo
Aug 12, 20148.844NONO
A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability". Thi
Jun 15, 20178.834NONO
Microsoft OneNote 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, 2016, and 2016 for Mac allow remote attackers to obtain sensitive information via a crafted OneNote file, aka "Microsof
Aug 9, 20165.534NONO
Microsoft Access 2007 SP3, Excel 2007 SP3, InfoPath 2007 SP3, OneNote 2007 SP3, PowerPoint 2007 SP3, Project 2007 SP3, Publisher 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Office 200
Nov 11, 20159.330NONO
Microsoft OneNote 2007 SP3 and Microsoft OneNote 2010 SP2 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office DLL Loading Vulnerability."
Apr 12, 20177.829NONO
Microsoft Crypto API 5.131.2600.2180 through 6.0, as used in Outlook, Windows Live Mail, and Office 2007, performs Certificate Revocation List (CRL) checks by using an arbitrary UR
Jul 7, 20087.528NONO
Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office 2002, Office 2003, Office 2004 for Mac, and Office v.X for Mac allows user-assisted attackers to execute ar
Oct 10, 20069.328NONO
AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.
Mar 16, 20267.126NONO

Exploit Exposure

Signals from CVEs in this product scope (16 CVEs).

CISA KEV
1 CVE
6.2% of CVEs· 97th percentile
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
1 CVE
6.2% of CVEs· 88th percentile

Social Chatter

Signals from CVEs in this product scope (16 CVEs).

Media Mentions

Signals from CVEs in this product scope (16 CVEs).

Top CNAs Publishing CVEs For Onenote

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
202115.40.4%00
201915.40.4%00
201647.012.0%00
201336.715.7%00
201047.820.7%00
200747.827.4%00
200348.730.3%11
16.8317.10.8%00