Vulnerability · Published Feb 4, 2026 · Assigned by krcert
CVE-2025-29867
High 8.5
In plain English
A high-severity type confusion in Hancom Office 2018 from Hancom Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 19% of all known vulnerabilities).
Official description
Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Hancom Inc. Hancom Office 2018, Hancom Inc. Hancom Office 2020, Hancom Inc. Hancom Office 2022, Hancom Inc. Hancom Office 2024 allows File Content Injection.This issue affects Hancom Office 2018: before 10.0.0.12681; Hancom Office 2020: before 11.0.0.8916; Hancom Office 2022: before 12.0.0.4426; Hancom Office 2024: before 13.0.0.3050.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Hancom Inc. | Hancom Office 2018 | 0 – before 10.0.0.12681 |
| Hancom Inc. | Hancom Office 2020 | 0 – before 11.0.0.8916 |
| Hancom Inc. | Hancom Office 2022 | 0 – before 12.0.0.4426 |
| Hancom Inc. | Hancom Office 2024 | 0 – before 13.0.0.3050 |
Weakness: CWE-843 · Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N