Improper input validation in Microsoft Office Word allows an unauthorized attacker to bypass a security feature over a network.

The version of Microsoft Office for Mac installed on the remote host is affected by multiple vulnerabilities as referenced in the april-15-2025 advisory.

  - Improper input validation in Microsoft Office Word allows an unauthorized attacker to bypass a security     feature over a network. (CVE-2025-29816)

  - Incomplete list of disallowed inputs in Microsoft Office OneNote allows an unauthorized attacker to bypass     a security feature locally. (CVE-2025-29822)

  - Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
    (CVE-2025-26642)

  - Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
    (CVE-2025-27750, CVE-2025-27751)

  - Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
    (CVE-2025-27747, CVE-2025-29820)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities:

  - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2025-27745, CVE-2025-27746, CVE-2025-27747)

  - A security feature bypass vulnerability. (CVE-2025-29816)

  - An elevation of privilege vulnerability. (CVE-2025-29792)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Microsoft Word Products are missing security updates. They are, therefore, affected by multiple vulnerabilities:

  - A security feature bypass vulnerability exists. An attacker can exploit this and bypass the security     feature and perform unauthorized actions compromising the integrity of the system/application.
    (CVE-2025-29816)

  - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2025-27747, CVE-2025-29820)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Microsoft Office Products are missing security updates. They are, therefore, affected by multiple vulnerabilities:

  - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges.
    (CVE-2025-29792)

  - A security feature bypass vulnerability exists. An attacker can exploit this and bypass the security     feature and perform unauthorized actions compromising the integrity of the system/application.
    (CVE-2025-29816)

  - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2025-26642, CVE-2025-27745, CVE-2025-27746, CVE-2025-27748,     CVE-2025-27749, CVE-2025-27752, CVE-2025-29791)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
234490	Security Updates for Microsoft Office Products (April 2025) (macOS)	Nessus	MacOS X Local Security Checks	Local	high
234231	Security Updates for Microsoft Office Products C2R (April 2025)	Nessus	Windows	Local	high
234045	Security Updates for Microsoft Word Products (April 2025)	Nessus	Windows : Microsoft Bulletins	Local	high
234041	Security Updates for Microsoft Office Products (April 2025)	Nessus	Windows : Microsoft Bulletins	Local	high

Detections

Analytics

CVE-2025-29816

high

Tenable Plugins

high

high

high

high