CVE-2023-36769

MediumCVSS 5.4/10Last modified Aug 10, 2026

Description

Microsoft OneNote Spoofing Vulnerability

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-290

Affected software

VendorProductVersions
MicrosoftMicrosoft Office 2019>= 19.0.0, < https://aka.ms/OfficeSecurityReleases
MicrosoftMicrosoft Office LTSC 2021>= 16.0.1, < https://aka.ms/OfficeSecurityReleases
MicrosoftMicrosoft OneNote 2013>= 15.0.0, < 15.0.5579.1000
MicrosoftMicrosoft OneNote 2013 Service Pack 1>= 15.0.0, < 15.0.5579.1000
MicrosoftMicrosoft OneNote 2016>= 16.0.0, < 16.0.5408.1000

References

Timeline

Published
Nov 6, 2023
Last modified
Aug 10, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-36778.8The WooCommerce PDF Invoice Builder plugin for WordPress is vulnerable to SQL Injection via the pageId parameter in versions up to, and inclCVE-2023-367707.83D Builder Remote Code Execution VulnerabilityCVE-2023-367717.83D Builder Remote Code Execution VulnerabilityCVE-2023-367727.83D Builder Remote Code Execution VulnerabilityCVE-2023-367737.83D Builder Remote Code Execution VulnerabilityCVE-2023-367767.0Win32k Elevation of Privilege VulnerabilityCVE-2023-367775.7Microsoft Exchange Server Information Disclosure VulnerabilityCVE-2023-367788.0Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2023-36789.8A vulnerability was found in SourceCodester AC Repair and Services System 1.0. It has been declared as critical. Affected by this vulnerabilCVE-2023-367807.2Skype for Business Remote Code Execution VulnerabilityCVE-2023-367857.8Microsoft ODBC Driver for SQL Server Remote Code Execution VulnerabilityCVE-2023-367867.2Skype for Business Remote Code Execution Vulnerability
CVE-2023-36769: Medium severity, CVSS 5.4 | Vulnix