Microsoft Microsoft OneNote

3 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2026-26133M365 Copilot Information Disclosure VulnerabilityHIGH 7.10.4 %
CVE-2025-29822Microsoft OneNote Security Feature Bypass VulnerabilityHIGH 7.80.8 %
CVE-2025-214021.0.0 – < 16.92.24120731Microsoft Office OneNote Remote Code Execution VulnerabilityHIGH 7.80.7 %