Summary
Impact: Spoofing. Microsoft rating: Moderate. Not known to be exploited. Customer action: Required.
Details
Security updates
https — https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates
16.0.5408.1000 — https://support.microsoft.com/help/4484434
15.0.5579.1000 — https://support.microsoft.com/help/4022167
Vulnerabilities 1
-
Medium 4.6
Microsoft OneNote Spoofing Vulnerability
Microsoft OneNote Spoofing Vulnerability
Revision history
-
#1
Information published. This CVE was addressed by updates that were released in August 2023, but the CVE was inadvertently omitted from the August 2023 Security Updates. Microsoft strongly recommends that customers running affected versions of OneNote install the updates to be protected from this vulnerability.
References
-
CVE-2023-36769 Microsoft OneNote Spoofing Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36769
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss