High severity7.8NVD Advisory· Published Apr 8, 2025· Updated Jun 17, 2026

CVE-2025-29822

Description

Incomplete list of disallowed inputs in Microsoft Office OneNote allows an unauthorized attacker to bypass a security feature locally.

Microsoft/Office4 versions
cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:x64:*+ 3 more
- cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:x64:*
- cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:x86:*
- (no CPE)range: 16.0.1
- (no CPE)range: 16.0.0
Microsoft/Office Long Term Servicing Channel6 versions
cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x64:*+ 5 more
- cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x64:*
- cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x86:*
- cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:macos:*:*
- cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x64:*
- cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x86:*
- cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:macos:*:*
Microsoft/Onenote2 versions
cpe:2.3:a:microsoft:onenote:-:*:*:*:*:macos:*:*+ 1 more
- cpe:2.3:a:microsoft:onenote:-:*:*:*:*:macos:*:*
- cpe:2.3:a:microsoft:onenote:2016:*:*:*:*:*:*:*
Microsoft/Office OneNotellm-fuzzy
Microsoft/Microsoft 365 Apps for Enterprisev5
Range: 16.0.1
Microsoft/Office Visiocpe-rescue
Range: 19.0.0
Microsoft/Office For Maccpe-rescue2 versions
16.0.1+ 1 more
- (no CPE)range: 16.0.1
- (no CPE)range: 16.0.0
Microsoft/Microsoft OneNotev5
Range: 1.0.0
Microsoft/Microsoft OneNote 2016v5
Range: 16.0.0