Description
Incomplete list of disallowed inputs in Microsoft Office OneNote allows an unauthorized attacker to bypass a security feature locally.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Microsoft Microsoft 365 Apps for Enterprise
16.0.1 to < https://aka.ms/OfficeSecurityReleasesaffected
Microsoft Microsoft Office 2019
19.0.0 to < https://aka.ms/OfficeSecurityReleasesaffected
Microsoft Microsoft Office LTSC 2021
16.0.1 to < https://aka.ms/OfficeSecurityReleasesaffected
Microsoft Microsoft Office LTSC 2024
16.0.0 to < https://aka.ms/OfficeSecurityReleasesaffected
Microsoft Microsoft Office LTSC for Mac 2021
16.0.1 to < 16.96.25041326affected
Microsoft Microsoft Office LTSC for Mac 2024
16.0.0 to < 16.96.25041326affected
Microsoft Microsoft OneNote
1.0.0 to < 16.96.25033028affected
Microsoft Microsoft OneNote 2016
16.0.0 to < 16.0.5495.1001affected