CVE Catalog

CVE-2023-33140

MediumCVSS 6.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
1.65%

73th percentile - higher than 73% of all known CVEs

Summary

A vulnerability in Microsoft OneNote allows for spoofing, which can lead to unauthorized access to user data. An attacker can exploit this flaw to impersonate a trusted source and mislead users.

Risk Assessment

Organizations may be susceptible to phishing attacks, potentially leading to the leakage of sensitive information. Users may be misled, increasing the risk of data loss.

Recommendation

It is recommended to update Microsoft OneNote to the latest version and educate users on recognizing potential scams. Additionally, implementing extra security measures such as email filtering is advisable.

Original NVD description (English source)

Microsoft OneNote Spoofing Vulnerability

Vulnerability data from NVD (NIST) · CISA KEV · EPSS