Microsoft Office OneNote Remote Code Execution Vulnerability

Microsoft OneNote has a vulnerability that allows attackers to execute malicious code on your computer when you open a specially crafted document. This is dangerous because it gives attackers full control over your system.

CWE-641 vulnerability in OneNote allows remote code execution through crafted files that exploit improper handling of embedded objects or external references. Attack requires user interaction (document opening) and results in code execution with user privileges; no authentication bypass or elevated privileges required for initial compromise.