CVE-2025-29822: Microsoft OneNote Security Feature Bypass Vulnerability
Published Apr 8, 2025
·Updated
Incomplete list of disallowed inputs in Microsoft Office OneNote allows an unauthorized attacker to bypass a security feature locally.
Other sources
Microsoft OneNote Security Feature Bypass Vulnerability
— Microsoft
Affected Software
23 affected componentsFixes available
Microsoft OneNote for Mac
Microsoft Office LTSC 2021 for 32-bit editions
Microsoft Office LTSC 2024 for 64-bit editions
Microsoft Office LTSC 2024 for 32-bit editions
Microsoft Office 2019 for 32-bit editions
Microsoft 365 Apps for Enterprise
Microsoft Office LTSC 2021 for 64-bit editions
Microsoft OneNote 2016
Microsoft 365 Apps for Enterprise
Microsoft OneNote 2016
Microsoft Office 2019 for 64-bit editions
Microsoft Office LTSC for Mac 2021
Microsoft Office LTSC for Mac 2024
Microsoft Office=2019
Microsoft Office=2019
Microsoft Office Long Term Servicing Channel=2021
Microsoft Office Long Term Servicing Channel=2021
Microsoft Office Long Term Servicing Channel Macos=2021
Microsoft Office Long Term Servicing Channel=2024
Microsoft Office Long Term Servicing Channel=2024
Microsoft Office Long Term Servicing Channel Macos=2024
Microsoft Onenote Macos
Microsoft OneNote=2016
Event History
Apr 8, 2025
CVE Published
via Microsoft·07:00 AM
Data Sourced
via Microsoft·07:00 AM
DescriptionSeverityWeakness
CVE Published
via MITRE·05:23 PM
Data Sourced
via MITRE·05:23 PM
DescriptionSeverity
Data Sourced
via NVD·06:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-29822?
CVE-2025-29822 has been classified with a medium severity rating due to the potential for unauthorized access.
2
How do I fix CVE-2025-29822?
To fix CVE-2025-29822, install the latest security updates provided by Microsoft for affected products.
3
Which products are affected by CVE-2025-29822?
CVE-2025-29822 affects various Microsoft Office products including OneNote and Office LTSC versions.
4
Is local access required to exploit CVE-2025-29822?
Yes, an attacker needs local access to exploit CVE-2025-29822 as it involves bypassing a security feature.
5
Can CVE-2025-29822 affect Mac users?
Yes, CVE-2025-29822 affects Mac users running specific versions of Microsoft OneNote and Office applications.