CVE-2024-21384
HighCVSS 7.8Exploitation Probability (EPSS)
Elevated risk55th percentile - higher than 55% of all known CVEs
Summary
Vulnerability in Microsoft Office OneNote allows remote code execution. An attacker could exploit this flaw to run malicious code on the victim's machine.
Risk Assessment
Risk of full system compromise and data theft.
Recommendation
Update Microsoft Office to the latest version and be cautious when opening OneNote files from unknown sources.
Other vulnerabilities in Microsoft Office OneNote
See all- CVE-2026-97781High
Command injection vulnerability in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network.
- CVE-2026-96997High
Use after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally.
- CVE-2025-21402High
A vulnerability in Microsoft Office OneNote allows for remote code execution. An attacker can exploit this flaw to execute malicious code on the victim's system.
- CVE-2026-55133High
Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code locally. The attack requires local access.
Original NVD description (English source)
Microsoft Office OneNote Remote Code Execution Vulnerability
Vulnerability data from NVD (NIST) · CISA KEV · EPSS