CVE Vulnerabilities

CVE-2025-29816

Acceptance of Extraneous Untrusted Data With Trusted Data

Published: Apr 08, 2025 | Modified: Jul 09, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Improper input validation in Microsoft Office Word allows an unauthorized attacker to bypass a security feature over a network.

Weakness

The product, when processing trusted data, accepts any untrusted data that is also included with the trusted data, treating the untrusted data as if it were trusted.

Affected Software

Name Vendor Start Version End Version
365_apps Microsoft - (including) - (including)
Office Microsoft 2016 (including) 2016 (including)
Office Microsoft 2019 (including) 2019 (including)
Office_long_term_servicing_channel Microsoft 2021 (including) 2021 (including)
Office_long_term_servicing_channel Microsoft 2024 (including) 2024 (including)
Word Microsoft 2016 (including) 2016 (including)

References