← Back

CVE-2016-3315

nvd nist
Published: Aug 9, 2016Modified: May 6, 2026

JSON object

Loading...
5.5
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Exploitability: 1.8 / Impact: 3.6
Source: NVD

Description

Microsoft OneNote 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, 2016, and 2016 for Mac allow remote attackers to obtain sensitive information via a crafted OneNote file, aka "Microsoft OneNote Information Disclosure Vulnerability."

Affected (6)

Microsoft
2 products
Onenote
Onenote For Mac
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Microsoft
Onenote
Version 2007 sp3
Onenote
Version 2010 sp2
Onenote
Version 2013 sp1
Onenote
Version 2013 sp1
Onenote
Version 2016
Onenote For Mac
Version 2016

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (6)

Source: secure@microsoft.com
Source: secure@microsoft.com
Source: secure@microsoft.com
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.