CVE-2026-97781 — Microsoft Office OneNote Remote Code Execution Vulnerability

An improper-neutralization-of-special-elements vulnerability, classified as command injection, in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network.