CVE-2025-29791
7.8 highEPSS 1.0%
High (7.8) in microsoft. EPSS 1.0% chance of exploitation in the next 30 days.
Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
Severity
CVSS 3.1
7.8 highCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H- EPSS
- 1.0% chance of exploitation in the next 30 days; higher than 64% of CVEs (scores of 2026-10-31)
- CWE
- CWE-843
- Published
- Modified
- Record from
- the NVD, synced
Affected
- microsoft:365_apps
- microsoft:office
- microsoft:office_long_term_servicing_channel
References
Check your stackJSON