CVE Catalog
CVE-2023-33140
MediumCVSS 6.5Exploitation Probability (EPSS)
Elevated risk1.65%
73th percentile - higher than 73% of all known CVEs
Summary
A vulnerability in Microsoft OneNote allows for spoofing, which can lead to unauthorized access to user data. An attacker can exploit this flaw to impersonate a trusted source and mislead users.
Risk Assessment
Organizations may be susceptible to phishing attacks, potentially leading to the leakage of sensitive information. Users may be misled, increasing the risk of data loss.
Recommendation
It is recommended to update Microsoft OneNote to the latest version and educate users on recognizing potential scams. Additionally, implementing extra security measures such as email filtering is advisable.
Original NVD description (English source)
Microsoft OneNote Spoofing Vulnerability

