VDB
GCVE-110-NCSC-2024-471
GCVE-110-NCSC-2024-471
Advisory PublishedCVSS 7.0/10
Improper Restriction of XML External Entity Reference
Weaknesses (CWE)
CWE-59Improper Link Resolution Before File Access ('Link Following')CWE-416Use After FreeCWE-125Out-of-bounds ReadCWE-284Improper Access ControlCWE-611Improper Restriction of XML External Entity ReferenceCWE-502Deserialization of Untrusted DataCWE-23Relative Path Traversal
Risk Scores
CVSS 3.1
7.0/10
High · CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| microsoft | 365_apps | — | — |
| microsoft | microsoft_365_apps_for_enterprise | — | — |
| microsoft | microsoft_word_2016 | — | — |
| microsoft | office | — | — |
| microsoft | microsoft_office_ltsc_for_mac_2024 | — | — |
| microsoft | microsoft_office_2019 | — | — |
| microsoft | microsoft_office_ltsc_2021 | — | — |
| microsoft | microsoft_access_2016__32-bit_edition_ | — | — |
| microsoft | microsoft_sharepoint_enterprise_server_2016 | — | — |
| microsoft | microsoft_excel_2016 | — | — |
| microsoft | microsoft_office_ltsc_2024 | — | — |
| microsoft | excel | — | — |
| microsoft | microsoft_office_2016 | — | — |
| microsoft | microsoft_access_2016__64-bit_edition_ | — | — |
| microsoft | access | — | — |
| microsoft | microsoft_office_ltsc_for_mac_2021 | — | — |
| microsoft | microsoft_sharepoint_server_subscription_edition | — | — |
| microsoft | office_long_term_servicing_channel | — | — |
| microsoft | sharepoint_server | — | — |
| microsoft | microsoft_sharepoint_server_2019 | — | — |
Browse GCVE Records
73,834 records in the GCVE database · Updated July 19, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.