Microsoft Microsoft OneNote for Android

3 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2026-4110016.0.1 – < 16.0.19822.20190Microsoft 365 Copilot for Android Spoofing VulnerabilityMEDIUM 4.40.2 %
CVE-2026-26133M365 Copilot Information Disclosure VulnerabilityHIGH 7.10.4 %
CVE-2023-2172116.0.1 – < 16.0.16026.20158Microsoft OneNote Elevation of Privilege VulnerabilityMEDIUM 6.50.9 %