Microsoft OneNote for Universal

productDE

cpe:/a:microsoft:onenote:for_universal

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

critical

by severity

0critical0high1medium0low

updated 2026-10-23

vulnerabilities (11)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-29357US	—OT critical	100.0% (100th)	KEV	no fix	2023-06-14	—
CVE-2023-33131US	—	5.72% (93rd)	Exploit	no fix	2023-06-14	—
CVE-2023-33137US	—	2.75% (86th)	Exploit	no fix	2023-06-14	—
CVE-2023-32029US	—	53.5% (99th)	—	no fix	2023-06-14	—
CVE-2023-33133US	—	44.0% (99th)	—	no fix	2023-06-14	—
CVE-2023-33129US	—	1.98% (80th)	—	no fix	2023-06-14	—
CVE-2023-33140US	medium6.5	1.65% (76th)	—	no fix	2023-06-14	—
CVE-2023-33130US	—	1.18% (67th)	—	no fix	2023-06-14	—
CVE-2023-33142US	—	1.02% (63rd)	—	no fix	2023-06-14	—
CVE-2023-33132US	—	0.88% (59th)	—	no fix	2023-06-14	—
CVE-2023-33146US	—	0.84% (57th)	—	no fix	2023-06-14	—

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation4 CVEs
CWE-451User Interface (UI) Misrepresentation of Critical Information4 CVEs
CWE-122Heap-based Buffer Overflow3 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer2 CVEs
CWE-264CWE-2642 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
CWE-125Out-of-bounds Read1 CVEs
CWE-285Improper Authorization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.