CVE-2026-55133
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk26th percentile - higher than 26% of all known CVEs
Summary
Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code locally. The attack requires local access.
Risk Assessment
An attacker with local access can gain full control of the system by executing malicious code in the context of the OneNote application.
Recommendation
Install the latest Microsoft Office security updates from Microsoft. Restrict local access to the system to trusted users only.
Other vulnerabilities in Microsoft Office OneNote
See all- CVE-2025-21402High
A vulnerability in Microsoft Office OneNote allows for remote code execution. An attacker can exploit this flaw to execute malicious code on the victim's system.
- CVE-2024-21384High
Vulnerability in Microsoft Office OneNote allows remote code execution. An attacker could exploit this flaw to run malicious code on the victim's machine.
Original NVD description (English source)
Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code locally.