{"id":"CVE-2025-29822","state":"PUBLISHED","title":"Microsoft OneNote Security Feature Bypass Vulnerability","description":"Incomplete list of disallowed inputs in Microsoft Office OneNote allows an unauthorized attacker to bypass a security feature locally.","publishedAt":"2025-04-08T17:23:32.887Z","updatedAt":"2026-08-10T15:12:27.592Z","severity":{"score":7.8,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","source":"microsoft"},"assigner":"microsoft","products":["Microsoft Microsoft 365 Apps for Enterprise","Microsoft Microsoft Office 2019","Microsoft Microsoft Office LTSC 2021","Microsoft Microsoft Office LTSC 2024","Microsoft Microsoft Office LTSC for Mac 2021","Microsoft Microsoft Office LTSC for Mac 2024","Microsoft Microsoft OneNote","Microsoft Microsoft OneNote 2016"],"affected":[{"vendor":"Microsoft","product":"Microsoft 365 Apps for Enterprise","versions":[{"version":"16.0.1","status":"affected","lessThan":"https://aka.ms/OfficeSecurityReleases","versionType":"custom"}],"platforms":["32-bit Systems","x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft Office 2019","versions":[{"version":"19.0.0","status":"affected","lessThan":"https://aka.ms/OfficeSecurityReleases","versionType":"custom"}],"platforms":["32-bit Systems","x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft Office LTSC 2021","versions":[{"version":"16.0.1","status":"affected","lessThan":"https://aka.ms/OfficeSecurityReleases","versionType":"custom"}],"platforms":["32-bit Systems","x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft Office LTSC 2024","versions":[{"version":"16.0.0","status":"affected","lessThan":"https://aka.ms/OfficeSecurityReleases","versionType":"custom"}],"platforms":["32-bit Systems","x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft Office LTSC for Mac 2021","versions":[{"version":"16.0.1","status":"affected","lessThan":"16.96.25041326","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Office LTSC for Mac 2024","versions":[{"version":"16.0.0","status":"affected","lessThan":"16.96.25041326","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft OneNote","versions":[{"version":"1.0.0","status":"affected","lessThan":"16.96.25033028","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft OneNote 2016","versions":[{"version":"16.0.0","status":"affected","lessThan":"16.0.5495.1001","versionType":"custom"}],"platforms":["32-bit Systems","x64-based Systems"]}],"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29822"],"weaknesses":["CWE-184"],"ingestedAt":"2026-10-29T20:08:55.257Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/29xxx/CVE-2025-29822.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-29822","state":"PUBLISHED","datePublished":"2025-04-08T17:23:32.887Z","dateUpdated":"2026-08-10T15:12:27.592Z","assignerShortName":"microsoft","assignerOrgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","dateReserved":"2025-03-11T22:56:43.943Z"},"containers":{"cna":{"title":"Microsoft OneNote Security Feature Bypass Vulnerability","descriptions":[{"lang":"en-US","value":"Incomplete list of disallowed inputs in Microsoft Office OneNote allows an unauthorized attacker to bypass a security feature locally."}],"affected":[{"vendor":"Microsoft","product":"Microsoft 365 Apps for Enterprise","versions":[{"version":"16.0.1","status":"affected","lessThan":"https://aka.ms/OfficeSecurityReleases","versionType":"custom"}],"platforms":["32-bit Systems","x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft Office 2019","versions":[{"version":"19.0.0","status":"affected","lessThan":"https://aka.ms/OfficeSecurityReleases","versionType":"custom"}],"platforms":["32-bit Systems","x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft Office LTSC 2021","versions":[{"version":"16.0.1","status":"affected","lessThan":"https://aka.ms/OfficeSecurityReleases","versionType":"custom"}],"platforms":["32-bit Systems","x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft Office LTSC 2024","versions":[{"version":"16.0.0","status":"affected","lessThan":"https://aka.ms/OfficeSecurityReleases","versionType":"custom"}],"platforms":["32-bit Systems","x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft Office LTSC for Mac 2021","versions":[{"version":"16.0.1","status":"affected","lessThan":"16.96.25041326","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Office LTSC for Mac 2024","versions":[{"version":"16.0.0","status":"affected","lessThan":"16.96.25041326","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft OneNote","versions":[{"version":"1.0.0","status":"affected","lessThan":"16.96.25033028","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft OneNote 2016","versions":[{"version":"16.0.0","status":"affected","lessThan":"16.0.5495.1001","versionType":"custom"}],"platforms":["32-bit Systems","x64-based Systems"]}],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29822","name":"Microsoft OneNote Security Feature Bypass Vulnerability","tags":["vendor-advisory","patch"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en-US","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","baseSeverity":"HIGH","baseScore":7.8,"vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-184","description":"CWE-184: Incomplete List of Disallowed Inputs","lang":"en-US","type":"CWE"}]}],"providerMetadata":{"shortName":"microsoft","orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","dateUpdated":"2026-08-10T15:12:27.592Z"},"datePublic":"2025-04-08T07:00:00.000Z","cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_2019:*:*:*:*:*:*:*:*","versionStartIncluding":"19.0.0","versionEndExcluding":"https://aka.ms/OfficeSecurityReleases"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*","versionStartIncluding":"16.0.1","versionEndExcluding":"https://aka.ms/OfficeSecurityReleases"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*","versionStartIncluding":"16.0.1","versionEndExcluding":"https://aka.ms/OfficeSecurityReleases"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:onenote_for_mac:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"16.96.25033028"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*","versionStartIncluding":"16.0.0","versionEndExcluding":"https://aka.ms/OfficeSecurityReleases"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:onenote_2016:*:*:*:*:*:*:*:*","versionStartIncluding":"16.0.0","versionEndExcluding":"16.0.5495.1001"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*","versionStartIncluding":"16.0.0","versionEndExcluding":"16.96.25041326"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*","versionStartIncluding":"16.0.1","versionEndExcluding":"16.96.25041326"}]}]}]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-04-08T20:13:35.512534Z","id":"CVE-2025-29822","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-04-08T20:22:56.573Z"}}]}}}