CVE-2025-29867

State: Published
Severity: 8.5 High
Published: Feb 4, 2026
Updated: Feb 27, 2026
Reserved: Mar 12, 2025

Description

Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Hancom Inc. Hancom Office 2018, Hancom Inc. Hancom Office 2020, Hancom Inc. Hancom Office 2022, Hancom Inc. Hancom Office 2024 allows File Content Injection.This issue affects Hancom Office 2018: before 10.0.0.12681; Hancom Office 2020: before 11.0.0.8916; Hancom Office 2022: before 12.0.0.4426; Hancom Office 2024: before 13.0.0.3050.

Scores

CVSS	Score	Vector	Source
4.0	8.5 High	CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N	krcert

Weaknesses

CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')

Affected Products

Product	Versions
Hancom Office 2018Hancom Inc.	before 10.0.0.12681Affectedfrom 10.0.0.12681Not affected
Hancom Office 2020Hancom Inc.	before 11.0.0.8916Affectedfrom 11.0.0.8916Not affected
Hancom Office 2022Hancom Inc.	before 12.0.0.4426Affectedfrom 12.0.0.4426Not affected
Hancom Office 2024Hancom Inc.	before 13.0.0.3050Affectedfrom 13.0.0.3050Not affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.