What is CVE-2023-21721?

CVE-2023-21721 is a security advisory published by Microsoft Security Response Center (MSRC) with High severity. Microsoft OneNote Elevation of Privilege Vulnerability

Which CVE IDs does CVE-2023-21721 cover?

CVE-2023-21721 covers the following CVE IDs: CVE-2023-21721. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2023-21721?

CVE-2023-21721 has a CVSS v3 base score of 6.5, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2023-21721?

CVE-2023-21721 affects 1 product, including: Microsoft OneNote for Android.

CVE-2023-21721HighCVSS 6.5

Microsoft OneNote Elevation of Privilege Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

February 14, 2023

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2023-21721 →

📋 Description

According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability? Any authenticated user could trigger this vulnerability. It does not require admin or other elevated privileges.

According to the CVSS metric, successful exploitation of this vulnerability could lead to total loss of integrity (I:H)? What does that mean for this vulnerability? An authenticated attacker could impersonate another user to perform actions.

How do I get the update for OneNote for Android? Please reference How to update the Play Store & apps on Android - Google Play Help for guidance.

🎯 Affected products1

Microsoft OneNote for Android

✅ Remediation

KBRelease Notes (Security Update) — fixed build 16.0.16026.20158

🔗 References (2)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21721
patchhttps://play.google.com/store/apps/details?id=com.microsoft.office.onenote