Microsoft OneNote for Android

productDE

cpe:/a:microsoft:onenote:for_android

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

1critical1high0medium0low

updated 2026-10-27

vulnerabilities (6)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-21823US	—OT critical	5.56% (93rd)	KEV	no fix	2023-02-14	—
CVE-2023-21715US	high7.3OT critical	12.0% (96th)	KEV	no fix	2023-02-14	—
CVE-2023-21716US	critical9.8	84.8% (100th)	Exploit	no fix	2023-02-14	—
CVE-2023-21717US	—	1.09% (65th)	—	no fix	2023-02-14	—
CVE-2023-21721US	—	0.88% (59th)	—	no fix	2023-02-14	—
CVE-2023-21714US	—	0.60% (48th)	—	no fix	2023-02-14	—

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer2 CVEs
CWE-190Integer Overflow or Wraparound2 CVEs
CWE-125Out-of-bounds Read1 CVEs
CWE-284Improper Access Control1 CVEs
CWE-287Improper Authentication1 CVEs
CWE-451User Interface (UI) Misrepresentation of Critical Information1 CVEs
CWE-668Exposure of Resource to Wrong Sphere1 CVEs
CWE-863Incorrect Authorization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.