CVE-2025-29867CWE-843

Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Hancom Inc

High · published February 4, 2026

CVSS v4.0
8.5
EPSS
0%
Percentile
18.7
In the wild
Unconfirmed
What it is

Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Hancom Inc. Hancom Office 2018, Hancom Inc. Hancom Office 2020, Hancom Inc. Hancom Office 2022, Hancom Inc. Hancom Office 2024 allows File Content Injection.This issue affects Hancom Office 2018: before 10.0.0.12681; Hancom Office 2020: before 11.0.0.8916; Hancom Office 2022: before 12.0.0.4426; Hancom Office 2024: before 13.0.0.3050.

The record
Technical detail
CVSS v4.0
8.5 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00273 · 18.7th percentile
Weakness
CWE-843 · Access of Resource Using Incompatible Type ('Type Confusion')
Published
2026-02-04T04:46Z
EPSS history
Timeline
  • 04 FEB 04:46Z
    Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Hancom Inc
    cvelistv5