CVE Catalog
CVE-2023-33140
MediumCVSS 6.5Exploitation Probability (EPSS)
Elevated risk1.65%
73th percentile - higher than 73% of all known CVEs
Summary
A vulnerability in Microsoft OneNote allows for spoofing, which can lead to unauthorized access to user data. An attacker can exploit this flaw to impersonate a trusted source and mislead users.
Risk Assessment
Organizations may be susceptible to phishing attacks, potentially leading to the leakage of sensitive information. Users may be misled, increasing the risk of data loss.
Recommendation
It is recommended to update Microsoft OneNote to the latest version and educate users on recognizing potential scams. Additionally, implementing extra security measures such as email filtering is advisable.
Other vulnerabilities in Microsoft OneNote
See allOriginal NVD description (English source)
Microsoft OneNote Spoofing Vulnerability
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

