CVE-2026-46671
Rust OneNote File Parser: Path traversal in `Parser::parse_notebook` allows reading files outside the notebook directory
Rust OneNote File Parser is a parser for Microsoft OneNote files implemented in Rust. Prior to version 1.1.1, a maliciously crafted .onetoc2 table-of-contents file can cause Parser::parse_notebook to open arbitrary files on the host filesystem outside the notebook's directory. The parser reads entry names listed inside the .onetoc2 and joins them against the notebook's base directory without validating that they are relative paths confined to that directory. The parser will bail out when the target file fails to parse as a OneNote section, so direct content exfiltration through the parser's return value is not practical, though file-existence probing and denial-of-service via large or special files remain possible. Anyone using onenote_parser to parse .onetoc2 files received from untrusted sources is affected. Users who only ever parse their own notebooks are not at meaningful risk. The issue is fixed in onenote_parser 1.1.1. The fix rejects absolute paths, parent-directory components, and other invalid path characters in entry names, and additionally canonicalises the resolved path to confirm it stays inside the notebook's base directory. For users who cannot upgrade to 1.1.1, only call Parser::parse_notebook on .onetoc2 files from trusted sources. Alternatively, use Parser::parse_section / Parser::parse_section_buffer on individual .one files, which do not perform the directory walk.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- Low
- Integrity
- None
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
Rust OneNote File Parser: Path traversal in `Parser::parse_notebook` allows reading files outside the notebook directory
Rust OneNote File Parser is a parser for Microsoft OneNote files implemented in Rust. Prior to version 1.1.1, a maliciously crafted .onetoc2 table-of-contents file can cause Parser::parse_notebook to open arbitrary files on the host filesystem outside the notebook's directory. The parser reads entry names listed inside the .onetoc2 and joins them against the notebook's base directory without validating that they are relative paths confined to that directory. The parser will bail out when the target file fails to parse as a OneNote section, so direct content exfiltration through the parser's return value is not practical, though file-existence probing and denial-of-service via large or special files remain possible. Anyone using onenote_parser to parse .onetoc2 files received from untrusted sources is affected. Users who only ever parse their own notebooks are not at meaningful risk. The issue is fixed in onenote_parser 1.1.1. The fix rejects absolute paths, parent-directory components, and other invalid path characters in entry names, and additionally canonicalises the resolved path to confirm it stays inside the notebook's base directory. For users who cannot upgrade to 1.1.1, only call Parser::parse_notebook on .onetoc2 files from trusted sources. Alternatively, use Parser::parse_section / Parser::parse_section_buffer on individual .one files, which do not perform the directory walk.
- Record
CVE-2026-46671- CVSS 3.1
- 4.4 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L - Weakness
- CWE-22
- Updated
- 2026-11-02
EUVDEUVD-2026-45987
Rust OneNote File Parser is a parser for Microsoft OneNote files implemented in Rust. Prior to version 1.1.1, a maliciously crafted .onetoc2 table-of-contents file can cause Parser::parse_notebook to open arbitrary files on the host filesystem outside the notebook's directory. The parser reads entry names listed inside the .onetoc2 and joins them against the notebook's base directory without validating that they are relative paths confined to that directory. The parser will bail out when the target file fails to parse as a OneNote section, so direct content exfiltration through the parser's return value is not practical, though file-existence probing and denial-of-service via large or special files remain possible. Anyone using onenote_parser to parse .onetoc2 files received from untrusted sources is affected. Users who only ever parse their own notebooks are not at meaningful risk. The issue is fixed in onenote_parser 1.1.1. The fix rejects absolute paths, parent-directory components, and other invalid path characters in entry names, and additionally canonicalises the resolved path to confirm it stays inside the notebook's base directory. For users who cannot upgrade to 1.1.1, only call Parser::parse_notebook on .onetoc2 files from trusted sources. Alternatively, use Parser::parse_section / Parser::parse_section_buffer on individual .one files, which do not perform the directory walk.
- Record
EUVD-2026-45987- CVSS 3.1
- 4.4 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-4j5m-wc25-pvh7
Rust OneNote File Parser: Path traversal in `Parser::parse_notebook` allows reading files outside the notebook directory
Impact
A maliciously crafted .onetoc2 table-of-contents file can cause Parser::parse_notebook to open arbitrary files on the host filesystem outside the notebook's directory. The parser reads entry names listed inside the .onetoc2 and joins them against the notebook's base directory without validating that they are relative paths confined to that directory.
The parser will bail out when the target file fails to parse as a OneNote section, so direct content exfiltration through the parser's return value is not practical, though file-existence probing and denial-of-service via large or special files remain possible.
Anyone using onenote_parser to parse .onetoc2 files received from untrusted sources is affected. Users who only ever parse their own notebooks are not at meaningful risk.
Patches
Fixed in onenote_parser 1.1.1. The fix rejects absolute paths, parent-directory components, and other invalid path characters in entry names, and additionally canonicalises the resolved path to confirm it stays inside the notebook's base directory.
Workarounds
For users who cannot upgrade to 1.1.1:
- Only call
Parser::parse_notebookon.onetoc2files from trusted sources. - Alternatively, use
Parser::parse_section/Parser::parse_section_bufferon individual .one files, which do not perform the directory walk.
- Record
GHSA-4j5m-wc25-pvh7- CVSS 3.1
- 4.4 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L - Weakness
- CWE-22
- Updated
- 2026-11-02
NVD
Rust OneNote File Parser is a parser for Microsoft OneNote files implemented in Rust. Prior to version 1.1.1, a maliciously crafted .onetoc2 table-of-contents file can cause Parser::parse_notebook to open arbitrary files on the host filesystem outside the notebook's directory. The parser reads entry names listed inside the .onetoc2 and joins them against the notebook's base directory without validating that they are relative paths confined to that directory. The parser will bail out when the target file fails to parse as a OneNote section, so direct content exfiltration through the parser's return value is not practical, though file-existence probing and denial-of-service via large or special files remain possible. Anyone using onenote_parser to parse .onetoc2 files received from untrusted sources is affected. Users who only ever parse their own notebooks are not at meaningful risk. The issue is fixed in onenote_parser 1.1.1. The fix rejects absolute paths, parent-directory components, and other invalid path characters in entry names, and additionally canonicalises the resolved path to confirm it stays inside the notebook's base directory. For users who cannot upgrade to 1.1.1, only call Parser::parse_notebook on .onetoc2 files from trusted sources. Alternatively, use Parser::parse_section / Parser::parse_section_buffer on individual .one files, which do not perform the directory walk.
- Record
CVE-2026-46671- CVSS 3.1
- 4.4 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L - Weakness
- CWE-22
- Updated
- 2026-11-02
OSV
Rust OneNote File Parser: Path traversal in `Parser::parse_notebook` allows reading files outside the notebook directory
Rust OneNote File Parser is a parser for Microsoft OneNote files implemented in Rust. Prior to version 1.1.1, a maliciously crafted .onetoc2 table-of-contents file can cause Parser::parse_notebook to open arbitrary files on the host filesystem outside the notebook's directory. The parser reads entry names listed inside the .onetoc2 and joins them against the notebook's base directory without validating that they are relative paths confined to that directory. The parser will bail out when the target file fails to parse as a OneNote section, so direct content exfiltration through the parser's return value is not practical, though file-existence probing and denial-of-service via large or special files remain possible. Anyone using onenote_parser to parse .onetoc2 files received from untrusted sources is affected. Users who only ever parse their own notebooks are not at meaningful risk. The issue is fixed in onenote_parser 1.1.1. The fix rejects absolute paths, parent-directory components, and other invalid path characters in entry names, and additionally canonicalises the resolved path to confirm it stays inside the notebook's base directory. For users who cannot upgrade to 1.1.1, only call Parser::parse_notebook on .onetoc2 files from trusted sources. Alternatively, use Parser::parse_section / Parser::parse_section_buffer on individual .one files, which do not perform the directory walk.
- Record
CVE-2026-46671- CVSS 3.1
- 4.4 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L - Weakness
- CWE-22
- Updated
- 2026-11-02
OSVGHSA-4j5m-wc25-pvh7
Rust OneNote File Parser: Path traversal in `Parser::parse_notebook` allows reading files outside the notebook directory
Impact
A maliciously crafted .onetoc2 table-of-contents file can cause Parser::parse_notebook to open arbitrary files on the host filesystem outside the notebook's directory. The parser reads entry names listed inside the .onetoc2 and joins them against the notebook's base directory without validating that they are relative paths confined to that directory.
The parser will bail out when the target file fails to parse as a OneNote section, so direct content exfiltration through the parser's return value is not practical, though file-existence probing and denial-of-service via large or special files remain possible.
Anyone using onenote_parser to parse .onetoc2 files received from untrusted sources is affected. Users who only ever parse their own notebooks are not at meaningful risk.
Patches
Fixed in onenote_parser 1.1.1. The fix rejects absolute paths, parent-directory components, and other invalid path characters in entry names, and additionally canonicalises the resolved path to confirm it stays inside the notebook's base directory.
Workarounds
For users who cannot upgrade to 1.1.1:
- Only call
Parser::parse_notebookon.onetoc2files from trusted sources. - Alternatively, use
Parser::parse_section/Parser::parse_section_bufferon individual .one files, which do not perform the directory walk.
- Record
GHSA-4j5m-wc25-pvh7- CVSS 3.1
- 4.4 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L - Weakness
- CWE-22
- Updated
- 2026-11-02
Show 7 moreShow less
OSVopenSUSE-SU-2026:11583-1 No score
clamav-1.5.4-1.1 on GA media
These are all security issues fixed in the clamav-1.5.4-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2026:11583-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:21831-1 No score
Security update for clamav
This update for clamav fixes the following issues:
- CVE-2026-20337: Improper boundary checks for content in zip archive parser (bsc#1274597).
- CVE-2026-20338: invalid free due to bad ownership handling when merging ZIP catalogue records (bsc#1274598).
- CVE-2026-20339: integer overflow in the PESpin unpacker leads to undersized allocation and heap out-of-bounds write (bsc#1274599).
- CVE-2026-20345: out-of-bounds read/write via indexing error when converting GPT partition names (bsc#1274600).
- CVE-2026-20346: integer underflow when parsing malformed PDF hex strings causes a crash (bsc#1274601).
- CVE-2026-20347: integer overflow and undefined behavior when scanning malformed Mach-O files causes a crash (bsc#1274602).
- CVE-2026-20348: improper size handling in the XAR parser allows excessive allocation and scan-limit bypass (bsc#1274603).
- CVE-2026-46671: onenote_parser: Path traversal in
Parser:parse_notebookallows reading files outside the notebook directory (bsc#1271922). - CVE-2025-8088: rejects path separators in NTFS alternate data stream names to prevent extraction outside ClamAV's temporary scan directory on Windows.
Changes for clamav:
Update to 1.5.4:
- Fixed thread-safety issues in the clamd STATS command that could disclose process memory or crash the daemon while scans and STATS requests run concurrently. Also fixed partial socket-write handling used for large STATS responses.
- FreeBSD: Restored support for safe quarantine move and remove actions while preserving protection against source-path replacement races.
- Fixed an OpenSSL library-context leak in legacy hashing helpers when a requested message digest cannot be fetched, such as when the default provider is unavailable in a FIPS-enabled environment.
- Upgraded the Rust crossbeam-epoch dependency to resolve the RUSTSEC-2026-0204 advisory.
- Record
openSUSE-SU-2026:21831-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:23706-1 No score
Security update for clamav
This update for clamav fixes the following issues:
- CVE-2026-20337: Improper boundary checks for content in zip archive parser (bsc#1274597).
- CVE-2026-20338: invalid free due to bad ownership handling when merging ZIP catalogue records (bsc#1274598).
- CVE-2026-20339: integer overflow in the PESpin unpacker leads to undersized allocation and heap out-of-bounds write (bsc#1274599).
- CVE-2026-20345: out-of-bounds read/write via indexing error when converting GPT partition names (bsc#1274600).
- CVE-2026-20346: integer underflow when parsing malformed PDF hex strings causes a crash (bsc#1274601).
- CVE-2026-20347: integer overflow and undefined behavior when scanning malformed Mach-O files causes a crash (bsc#1274602).
- CVE-2026-20348: improper size handling in the XAR parser allows excessive allocation and scan-limit bypass (bsc#1274603).
- CVE-2026-46671: onenote_parser: Path traversal in
Parser:parse_notebookallows reading files outside the notebook directory (bsc#1271922). - CVE-2025-8088: rejects path separators in NTFS alternate data stream names to prevent extraction outside ClamAV's temporary scan directory on Windows.
Changes for clamav:
Update to 1.5.4:
- Fixed thread-safety issues in the clamd STATS command that could disclose process memory or crash the daemon while scans and STATS requests run concurrently. Also fixed partial socket-write handling used for large STATS responses.
- FreeBSD: Restored support for safe quarantine move and remove actions while preserving protection against source-path replacement races.
- Fixed an OpenSSL library-context leak in legacy hashing helpers when a requested message digest cannot be fetched, such as when the default provider is unavailable in a FIPS-enabled environment.
- Upgraded the Rust crossbeam-epoch dependency to resolve the RUSTSEC-2026-0204 advisory.
- Record
SUSE-SU-2026:23706-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:23727-1 No score
Security update for clamav
This update for clamav fixes the following issues:
- CVE-2026-20337: Improper boundary checks for content in zip archive parser (bsc#1274597).
- CVE-2026-20338: invalid free due to bad ownership handling when merging ZIP catalogue records (bsc#1274598).
- CVE-2026-20339: integer overflow in the PESpin unpacker leads to undersized allocation and heap out-of-bounds write (bsc#1274599).
- CVE-2026-20345: out-of-bounds read/write via indexing error when converting GPT partition names (bsc#1274600).
- CVE-2026-20346: integer underflow when parsing malformed PDF hex strings causes a crash (bsc#1274601).
- CVE-2026-20347: integer overflow and undefined behavior when scanning malformed Mach-O files causes a crash (bsc#1274602).
- CVE-2026-20348: improper size handling in the XAR parser allows excessive allocation and scan-limit bypass (bsc#1274603).
- CVE-2026-46671: onenote_parser: Path traversal in
Parser:parse_notebookallows reading files outside the notebook directory (bsc#1271922). - CVE-2025-8088: rejects path separators in NTFS alternate data stream names to prevent extraction outside ClamAV's temporary scan directory on Windows.
Changes for clamav:
Update to 1.5.4:
- Fixed thread-safety issues in the clamd STATS command that could disclose process memory or crash the daemon while scans and STATS requests run concurrently. Also fixed partial socket-write handling used for large STATS responses.
- FreeBSD: Restored support for safe quarantine move and remove actions while preserving protection against source-path replacement races.
- Fixed an OpenSSL library-context leak in legacy hashing helpers when a requested message digest cannot be fetched, such as when the default provider is unavailable in a FIPS-enabled environment.
- Upgraded the Rust crossbeam-epoch dependency to resolve the RUSTSEC-2026-0204 advisory.
- Record
SUSE-SU-2026:23727-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:4179-1 No score
Security update for clamav
This update for clamav fixes the following issues:
- CVE-2026-20337: Improper boundary checks for content in zip archive parser (bsc#1274597).
- CVE-2026-20338: invalid free due to bad ownership handling when merging ZIP catalogue records (bsc#1274598).
- CVE-2026-20339: integer overflow in the PESpin unpacker leads to undersized allocation and heap out-of-bounds write (bsc#1274599).
- CVE-2026-20345: out-of-bounds read/write via indexing error when converting GPT partition names (bsc#1274600).
- CVE-2026-20346: integer underflow when parsing malformed PDF hex strings causes a crash (bsc#1274601).
- CVE-2026-20347: integer overflow and undefined behavior when scanning malformed Mach-O files causes a crash (bsc#1274602).
- CVE-2026-20348: improper size handling in the XAR parser allows excessive allocation and scan-limit bypass (bsc#1274603).
- CVE-2026-46671: onenote_parser: Path traversal in
Parser:parse_notebookallows reading files outside the notebook directory (bsc#1271922). - CVE-2025-8088: rejects path separators in NTFS alternate data stream names to prevent extraction outside ClamAV's temporary scan directory on Windows.
Changes for clamav:
Update to 1.5.4:
- Fixed thread-safety issues in the clamd STATS command that could disclose process memory or crash the daemon while scans and STATS requests run concurrently. Also fixed partial socket-write handling used for large STATS responses.
- FreeBSD: Restored support for safe quarantine move and remove actions while preserving protection against source-path replacement races.
- Fixed an OpenSSL library-context leak in legacy hashing helpers when a requested message digest cannot be fetched, such as when the default provider is unavailable in a FIPS-enabled environment.
- Upgraded the Rust crossbeam-epoch dependency to resolve the RUSTSEC-2026-0204 advisory.
- Record
SUSE-SU-2026:4179-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:4180-1 No score
Security update for clamav
This update for clamav fixes the following issues:
- CVE-2026-20337: Improper boundary checks for content in zip archive parser (bsc#1274597).
- CVE-2026-20338: invalid free due to bad ownership handling when merging ZIP catalogue records (bsc#1274598).
- CVE-2026-20339: integer overflow in the PESpin unpacker leads to undersized allocation and heap out-of-bounds write (bsc#1274599).
- CVE-2026-20345: out-of-bounds read/write via indexing error when converting GPT partition names (bsc#1274600).
- CVE-2026-20346: integer underflow when parsing malformed PDF hex strings causes a crash (bsc#1274601).
- CVE-2026-20347: integer overflow and undefined behavior when scanning malformed Mach-O files causes a crash (bsc#1274602).
- CVE-2026-20348: improper size handling in the XAR parser allows excessive allocation and scan-limit bypass (bsc#1274603).
- CVE-2026-46671: onenote_parser: Path traversal in
Parser:parse_notebookallows reading files outside the notebook directory (bsc#1271922). - CVE-2025-8088: ejects path separators in NTFS alternate data stream names to prevent extraction outside ClamAV's temporary scan directory on Windows.
Changes for clamav:
Update to 1.5.4:
- Fixed thread-safety issues in the clamd STATS command that could disclose process memory or crash the daemon while scans and STATS requests run concurrently. Also fixed partial socket-write handling used for large STATS responses.
- FreeBSD: Restored support for safe quarantine move and remove actions while preserving protection against source-path replacement races.
- Fixed an OpenSSL library-context leak in legacy hashing helpers when a requested message digest cannot be fetched, such as when the default provider is unavailable in a FIPS-enabled environment.
- Upgraded the Rust crossbeam-epoch dependency to resolve the RUSTSEC-2026-0204 advisory.
- Record
SUSE-SU-2026:4180-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:4208-1 No score
Security update for clamav
This update for clamav fixes the following issues:
- CVE-2026-20337: Improper boundary checks for content in zip archive parser (bsc#1274597).
- CVE-2026-20338: invalid free due to bad ownership handling when merging ZIP catalogue records (bsc#1274598).
- CVE-2026-20339: integer overflow in the PESpin unpacker leads to undersized allocation and heap out-of-bounds write (bsc#1274599).
- CVE-2026-20345: out-of-bounds read/write via indexing error when converting GPT partition names (bsc#1274600).
- CVE-2026-20346: integer underflow when parsing malformed PDF hex strings causes a crash (bsc#1274601).
- CVE-2026-20347: integer overflow and undefined behavior when scanning malformed Mach-O files causes a crash (bsc#1274602).
- CVE-2026-20348: improper size handling in the XAR parser allows excessive allocation and scan-limit bypass (bsc#1274603).
- CVE-2026-46671: onenote_parser: Path traversal in
Parser:parse_notebookallows reading files outside the notebook directory (bsc#1271922). - CVE-2025-8088: rejects path separators in NTFS alternate data stream names to prevent extraction outside ClamAV's temporary scan directory on Windows.
Changes for clamav:
Update to 1.5.4:
- Fixed thread-safety issues in the clamd STATS command that could disclose process memory or crash the daemon while scans and STATS requests run concurrently. Also fixed partial socket-write handling used for large STATS responses.
- FreeBSD: Restored support for safe quarantine move and remove actions while preserving protection against source-path replacement races.
- Fixed an OpenSSL library-context leak in legacy hashing helpers when a requested message digest cannot be fetched, such as when the default provider is unavailable in a FIPS-enabled environment.
- Upgraded the Rust crossbeam-epoch dependency to resolve the RUSTSEC-2026-0204 advisory.
- Record
SUSE-SU-2026:4208-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
onenote_parsercrates.io |
before 1.1.1 | 1.1.1 |
clamavSUSE:Linux Enterprise Server 16.0 From an advisory covering 9 CVEs |
before 1.5.4-160000.1.1 | 1.5.4-160000.1.1 |
clamavSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 9 CVEs |
before 1.5.4-160000.1.1 | 1.5.4-160000.1.1 |
clamavSUSE:Linux Enterprise Server 12 SP5-LTSS From an advisory covering 9 CVEs |
before 1.5.4-3.59.1 | 1.5.4-3.59.1 |
clamavSUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 From an advisory covering 9 CVEs |
before 1.5.4-3.59.1 | 1.5.4-3.59.1 |
clamavSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 9 CVEs |
before 1.5.4-150600.18.31.1 | 1.5.4-150600.18.31.1 |
clamavSUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 9 CVEs |
before 1.5.4-150600.18.31.1 | 1.5.4-150600.18.31.1 |
clamavSUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 9 CVEs |
before 1.5.4-150600.18.31.1 | 1.5.4-150600.18.31.1 |
clamavSUSE:Linux Enterprise Micro 5.5 From an advisory covering 9 CVEs |
before 1.5.4-150400.13.11.1 | 1.5.4-150400.13.11.1 |
clamavSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 9 CVEs |
before 1.5.4-150400.13.11.1 | 1.5.4-150400.13.11.1 |
Show 9 moreShow less
| Package | Affected | Fixed |
|---|---|---|
clamavSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 9 CVEs |
before 1.5.4-150400.13.11.1 | 1.5.4-150400.13.11.1 |
clamavSUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 9 CVEs |
before 1.5.4-150400.13.11.1 | 1.5.4-150400.13.11.1 |
clamavSUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 9 CVEs |
before 1.5.4-150400.13.11.1 | 1.5.4-150400.13.11.1 |
clamavSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 9 CVEs |
before 1.5.4-150400.13.11.1 | 1.5.4-150400.13.11.1 |
clamavSUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 9 CVEs |
before 1.5.4-150400.13.11.1 | 1.5.4-150400.13.11.1 |
clamavSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 9 CVEs |
before 1.5.4-150400.13.11.1 | 1.5.4-150400.13.11.1 |
clamavSUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 9 CVEs |
before 1.5.4-150400.13.11.1 | 1.5.4-150400.13.11.1 |
clamavopenSUSE:Tumbleweed From an advisory covering 9 CVEs |
before 1.5.4-1.1 | 1.5.4-1.1 |
clamavopenSUSE:Leap 16.0 From an advisory covering 9 CVEs |
before 1.5.4-160000.1.1 | 1.5.4-160000.1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-46671 is a medium vulnerability (CVSS 4.4) in Msiemens Rust Onenote File Parser, published May 21, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.15%, the 4th percentile. Fixed in onenote_parser 1.1.1.
References
github.com/msiemens/onenote.rs/security/advisories/GHSA-4j5m-wc25-pvh7
Show 24 moreShow less
nvd.nist.gov/vuln/detail/CVE-2026-46671
suse.com/support/update/announcement/2026/suse-su-202623706-1
bugzilla.suse.com/1271922