CVE-2025-21402
HighSummary
A vulnerability in Microsoft Office OneNote allows for remote code execution. An attacker can exploit this flaw to execute malicious code on the victim's system.
Risk Assessment
Exploitation of this vulnerability could lead to system takeover, posing a serious threat to the organization's data security.
Recommendation
It is recommended to update Microsoft Office OneNote to the latest version to patch this vulnerability. Additionally, monitor systems for unauthorized activity.
Other vulnerabilities in Microsoft Office OneNote
See all- CVE-2026-55133High
Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code locally. The attack requires local access.
- CVE-2024-21384High
Vulnerability in Microsoft Office OneNote allows remote code execution. An attacker could exploit this flaw to run malicious code on the victim's machine.
Original NVD description (English source)
Microsoft Office OneNote Remote Code Execution Vulnerability