Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Hancom Inc. Hancom Office 2018, Hancom Inc. Hancom Office 2020, Hancom Inc. Hancom Office 2022, Hancom Inc. Hancom Office 2024 allows File Content Injection.This issue affects Hancom Office 2018: before 10.0.0.12681; Hancom Office 2020: before 11.0.0.8916; Hancom Office 2022: before 12.0.0.4426; Hancom Office 2024: before 13.0.0.3050.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
CVE-2025-29867 Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Hancom Inc. Hancom Office 2018, Hancom Inc. Hancom Office 2020, Hancom Inc. Hancom Offi… https://www.cve.org/CVERecord?id=CVE-2025-29867
Post summary
A type‑confusion vulnerability (CVE‑2025‑29867) affecting Hancom Office 2018 and 2020 has been identified, but no PoC, exploit, mitigation, or evidence of active exploitation is mentioned.
Hancom Office DOC File Parsing Type Confusion Remote Code Execution Vulnerability (CVE-2025-29867) #CVE202529867 #CyberSecurity #Hancom #RemoteCodeExecutionVulnerability https://www.systemtek.co.uk/?p=48136 https://t.co/MXRCvjiVfg
Post summary
The tweet announces the identification of a remote code execution flaw in Hancom Office caused by file parsing type confusion, without providing additional exploitation details or mitigation information.