CVE Catalog
CVE-2024-21384
HighCVSS 7.8Exploitation Probability (EPSS)
Elevated risk0.85%
55th percentile - higher than 55% of all known CVEs
Summary
Vulnerability in Microsoft Office OneNote allows remote code execution. An attacker could exploit this flaw to run malicious code on the victim's machine.
Risk Assessment
Risk of full system compromise and data theft.
Recommendation
Update Microsoft Office to the latest version and be cautious when opening OneNote files from unknown sources.
Other vulnerabilities in Microsoft Office OneNote
See all- CVE-2025-21402High
A vulnerability in Microsoft Office OneNote allows for remote code execution. An attacker can exploit this flaw to execute malicious code on the victim's system.
- CVE-2026-55133High
Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code locally. The attack requires local access.
Original NVD description (English source)
Microsoft Office OneNote Remote Code Execution Vulnerability