CVE-2023-21721: Microsoft OneNote Elevation of Privilege Vulnerability

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-02-14 · updated 2026-08-19
Weakness: CWE-287

Description

Microsoft OneNote Elevation of Privilege Vulnerability

Affected products

Microsoft OneNote for Android: before 16.0.16026.20158 — fixed in 16.0.16026.20158
Microsoft OneNote for Android: from 16.0.1 before 16.0.16026.20158 — fixed in 16.0.16026.20158

How to fix

Upgrade to a fixed version: Microsoft OneNote for Android 16.0.16026.20158; Microsoft OneNote for Android 16.0.16026.20158. Check the vendor advisory for mitigations.

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21721
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21721

Get alerted when CVE-2023-21721 or the next vulnerability affects your stack