VDB
GCVE-110-NCSC-2025-10
GCVE-110-NCSC-2025-10
Advisory PublishedCVSS 8.8/10
Improper Control of Generation of Code ('Code Injection')
Weaknesses (CWE)
CWE-122Heap-based Buffer OverflowCWE-636Not Failing Securely ('Failing Open')CWE-200Exposure of Sensitive Information to an Unauthorized ActorCWE-125Out-of-bounds ReadCWE-190Integer Overflow or WraparoundCWE-400Uncontrolled Resource ConsumptionCWE-41Improper Resolution of Path EquivalenceCWE-126Buffer Over-readCWE-908Use of Uninitialized ResourceCWE-20Improper Input ValidationCWE-416Use After FreeCWE-476NULL Pointer DereferenceCWE-415Double FreeCWE-284Improper Access ControlCWE-591Sensitive Data Storage in Improperly Locked MemoryCWE-922Insecure Storage of Sensitive InformationCWE-451User Interface (UI) Misrepresentation of Critical InformationCWE-532Insertion of Sensitive Information into Log FileCWE-693Protection Mechanism FailureCWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')CWE-59Improper Link Resolution Before File Access ('Link Following')CWE-269Improper Privilege ManagementCWE-94Improper Control of Generation of Code ('Code Injection')CWE-352Cross-Site Request Forgery (CSRF)CWE-843Access of Resource Using Incompatible Type ('Type Confusion')CWE-285Improper AuthorizationCWE-833DeadlockCWE-303Incorrect Implementation of Authentication Algorithm
Risk Scores
CVSS 3.1
8.8/10
High · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| microsoft | windows_server_2008_r2_service_pack_1__server_core_installation_ | — | — |
| microsoft | windows_server_2008_r2_service_pack_1 | — | — |
| microsoft | windows_10_version_1507 | — | — |
| microsoft | windows_server_2022__23h2_edition__server_core_installation_ | — | — |
| microsoft | windows_server_2008__service_pack_2 | — | — |
| microsoft | windows_server_2016__server_core_installation_ | — | — |
| microsoft | windows_10_version_21h2 | — | — |
| microsoft | windows_11_version_23h2 | — | — |
| microsoft | windows_server_2025__server_core_installation_ | — | — |
| microsoft | windows_server_2008_service_pack_2 | — | — |
| microsoft | windows_server_2022 | — | — |
| microsoft | windows_11_version_22h2 | — | — |
| microsoft | windows_server_2025 | — | — |
| microsoft | windows_server_2019 | — | — |
| microsoft | windows_server_2019__server_core_installation_ | — | — |
| microsoft | windows_server_2012 | — | — |
| microsoft | windows_server_2012_r2__server_core_installation_ | — | — |
| microsoft | windows_server_2016 | — | — |
| microsoft | windows_server_2012_r2 | — | — |
| microsoft | windows_10_version_1809 | — | — |
| microsoft | windows_server_2008_service_pack_2__server_core_installation_ | — | — |
| microsoft | windows_10_version_22h2 | — | — |
| microsoft | windows_11_version_22h3 | — | — |
| microsoft | windows_server_2012__server_core_installation_ | — | — |
| microsoft | windows_11_version_24h2 | — | — |
| microsoft | windows_10_version_1607 | — | — |
Aliases
CVE-2024-7344CVE-2025-21189CVE-2025-21193CVE-2025-21202CVE-2025-21207CVE-2025-21210CVE-2025-21211CVE-2025-21213CVE-2025-21214CVE-2025-21215CVE-2025-21217CVE-2025-21218CVE-2025-21219CVE-2025-21220CVE-2025-21223CVE-2025-21224CVE-2025-21225CVE-2025-21226CVE-2025-21227CVE-2025-21228CVE-2025-21229CVE-2025-21230CVE-2025-21231CVE-2025-21232CVE-2025-21233CVE-2025-21234CVE-2025-21235CVE-2025-21236CVE-2025-21237CVE-2025-21238CVE-2025-21239CVE-2025-21240CVE-2025-21241CVE-2025-21242CVE-2025-21243CVE-2025-21244CVE-2025-21245CVE-2025-21246CVE-2025-21248CVE-2025-21249CVE-2025-21250CVE-2025-21251CVE-2025-21252CVE-2025-21255CVE-2025-21256CVE-2025-21257CVE-2025-21258CVE-2025-21260CVE-2025-21261CVE-2025-21263CVE-2025-21265CVE-2025-21266CVE-2025-21268CVE-2025-21269CVE-2025-21270CVE-2025-21271CVE-2025-21272CVE-2025-21273CVE-2025-21274CVE-2025-21275CVE-2025-21276CVE-2025-21277CVE-2025-21278CVE-2025-21280CVE-2025-21281CVE-2025-21282CVE-2025-21284CVE-2025-21285CVE-2025-21286CVE-2025-21287CVE-2025-21288CVE-2025-21289CVE-2025-21290CVE-2025-21291CVE-2025-21292CVE-2025-21293CVE-2025-21294CVE-2025-21295CVE-2025-21296CVE-2025-21297CVE-2025-21298CVE-2025-21299CVE-2025-21300CVE-2025-21301CVE-2025-21302CVE-2025-21303CVE-2025-21304CVE-2025-21305CVE-2025-21306CVE-2025-21307CVE-2025-21308CVE-2025-21309CVE-2025-21310CVE-2025-21311CVE-2025-21312CVE-2025-21313CVE-2025-21314CVE-2025-21315CVE-2025-21316CVE-2025-21317CVE-2025-21318CVE-2025-21319CVE-2025-21320CVE-2025-21321CVE-2025-21323CVE-2025-21324CVE-2025-21326CVE-2025-21327CVE-2025-21328CVE-2025-21329CVE-2025-21330CVE-2025-21331CVE-2025-21332CVE-2025-21333CVE-2025-21334CVE-2025-21335CVE-2025-21336CVE-2025-21338CVE-2025-21339CVE-2025-21340CVE-2025-21341CVE-2025-21343CVE-2025-21370CVE-2025-21372CVE-2025-21374CVE-2025-21378CVE-2025-21382CVE-2025-21389CVE-2025-21409CVE-2025-21411CVE-2025-21413CVE-2025-21417
References
Browse GCVE Records
74,267 records in the GCVE database · Updated July 22, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.