Skip to content

Known vulnerabilities in Microsoft OneNote for Android

Is your version affected?

CVE Summary Score Published
CVE-2026-41100 Improper access control in M365 Copilot allows an authorized attacker to perform spoofing locally 4.4 Medium May 12, 2026
CVE-2026-26133 AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network 7.1 High Mar 13, 2026
CVE-2023-21721 Microsoft OneNote Elevation of Privilege Vulnerability 6.5 Medium Feb 14, 2023

Other Microsoft products