High

DATE	CVE	VULNERABILITY TITLE	RISK
2025-01-14	CVE-2025-21402	Unspecified vulnerability in Microsoft Office and Onenote Microsoft Office OneNote Remote Code Execution Vulnerability local low complexity microsoft	7.8
2017-06-15	CVE-2017-8509	Unspecified vulnerability in Microsoft products A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability". network low complexity microsoft	8.8
2017-04-12	CVE-2017-0197	Improper Input Validation vulnerability in Microsoft Onenote 2007/2010 Microsoft OneNote 2007 SP3 and Microsoft OneNote 2010 SP2 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office DLL Loading Vulnerability." local low complexity microsoft CWE-20	7.8
2014-08-12	CVE-2014-2815	Unspecified vulnerability in Microsoft Onenote 2007 Microsoft OneNote 2007 SP3 allows remote attackers to execute arbitrary code via a crafted OneNote file that triggers creation of an executable file in a startup folder, aka "OneNote Remote Code Execution Vulnerability." network low complexity microsoft	8.8