VDB
GCVE-110-NCSC-2025-107
GCVE-110-NCSC-2025-107
Advisory PublishedCVSS 7.8/10
Incorrect Default Permissions
Weaknesses (CWE)
CWE-125Out-of-bounds ReadCWE-416Use After FreeCWE-284Improper Access ControlCWE-822Untrusted Pointer DereferenceCWE-122Heap-based Buffer OverflowCWE-843Access of Resource Using Incompatible Type ('Type Confusion')CWE-502Deserialization of Untrusted DataCWE-285Improper AuthorizationCWE-269Improper Privilege ManagementCWE-276Incorrect Default PermissionsCWE-349Acceptance of Extraneous Untrusted Data With Trusted DataCWE-184Incomplete List of Disallowed Inputs
Risk Scores
CVSS 3.1
7.8/10
High · CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Microsoft | vers:microsoft/6.2.9200.25423 | — | — |
| Microsoft | vers:microsoft/6.3.9600.22523 | — | — |
| Microsoft | vers:microsoft/10.0.17763.7137 | — | — |
| Microsoft | vers:microsoft/10.0.22621.5191 | — | — |
| Microsoft | vers:microsoft/10.0.26100.3775 | — | — |
| Microsoft | vers:microsoft/unknown | — | — |
| Microsoft | vers:microsoft/6.1.7601.27670 | — | — |
| Microsoft | vers:microsoft/10.0.20348.3454 | — | — |
| Microsoft | vers:microsoft/2021 | — | — |
| Microsoft | vers:microsoft/10.0.19045.5737 | — | — |
| Microsoft | vers:microsoft/10.0.25398.1551 | — | — |
| Microsoft | vers:microsoft/10.0.22631.5191 | — | — |
| Microsoft | vers:microsoft/6.0.6003.23220 | — | — |
| Microsoft | vers:microsoft/10.0.19044.5737 | — | — |
| Microsoft | vers:microsoft/10.0.14393.7970 | — | — |
Aliases
Browse GCVE Records
74,299 records in the GCVE database · Updated July 22, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.