جزئیات آسیب‌پذیری

CVE-2025-29816

Microsoft 365 Apps for EnterpriseMicrosoft OfficeMicrosoft Office LTSCMicrosoft Office LTSC for MacMicrosoft Word

Microsoft Word Security Feature Bypass Vulnerability

CVSS 3.1

7.5بالا

Improper input validation in Microsoft Office Word allows an unauthorized attacker to bypass a security feature over a network.

امتیاز	نسخه	منبع	بردار
7.5بالا	3.1	CVEProject cvelistV5 (CNA) (microsoft)	`CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C`

فروشنده	محصول	نسخه‌ها	منبع
Microsoft	Microsoft 365 Apps for Enterprise	16.0.1 ≤ v < https://aka.ms/OfficeSecurityReleases	CVEProject cvelistV5 (CNA)
Microsoft	Microsoft Office 2016	16.0.0 ≤ v < 16.0.5495.1002	CVEProject cvelistV5 (CNA)
Microsoft	Microsoft Office 2019	19.0.0 ≤ v < https://aka.ms/OfficeSecurityReleases	CVEProject cvelistV5 (CNA)
Microsoft	Microsoft Office LTSC 2021	16.0.1 ≤ v < https://aka.ms/OfficeSecurityReleases	CVEProject cvelistV5 (CNA)
Microsoft	Microsoft Office LTSC 2024	16.0.0 ≤ v < https://aka.ms/OfficeSecurityReleases	CVEProject cvelistV5 (CNA)
Microsoft	Microsoft Office LTSC for Mac 2021	16.0.1 ≤ v < 16.96.25041326	CVEProject cvelistV5 (CNA)
Microsoft	Microsoft Office LTSC for Mac 2024	16.0.0 ≤ v < 16.96.25041326	CVEProject cvelistV5 (CNA)
Microsoft	Microsoft Word 2016	16.0.1 ≤ v < 16.0.5495.1002	CVEProject cvelistV5 (CNA)

۰٫۴۸٪

احتمال بهره‌برداری در ۳۰ روز

۴۱٫۷٪

صدک (نسبت به همه‌ی CVEها)