VDB

GCVE-110-NCSC-2025-112

GCVE-110-NCSC-2025-112
Advisory PublishedCVSS 7.5/10
Vulnetix · Advisory published April 8, 2025
Microsoft heeft kwetsbaarheden verholpen in Windows.

Weaknesses (CWE)

CWE-400Uncontrolled Resource ConsumptionCWE-367Time-of-check Time-of-use (TOCTOU) Race ConditionCWE-284Improper Access ControlCWE-126Buffer Over-readCWE-59Improper Link Resolution Before File Access ('Link Following')CWE-122Heap-based Buffer OverflowCWE-20Improper Input ValidationCWE-1390Weak AuthenticationCWE-693Protection Mechanism FailureCWE-190Integer Overflow or WraparoundCWE-416Use After FreeCWE-1039Inadequate Detection or Handling of Adversarial Input Perturbations in Automated Recognition MechanismCWE-591Sensitive Data Storage in Improperly Locked MemoryCWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')CWE-749Exposed Dangerous Method or FunctionCWE-200Exposure of Sensitive Information to an Unauthorized ActorCWE-125Out-of-bounds ReadCWE-121Stack-based Buffer OverflowCWE-908Use of Uninitialized ResourceCWE-410Insufficient Resource PoolCWE-345Insufficient Verification of Data AuthenticityCWE-822Untrusted Pointer DereferenceCWE-1240Use of a Cryptographic Primitive with a Risky ImplementationCWE-922Insecure Storage of Sensitive Information

Risk Scores

CVSS 3.1
7.5/10
High · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C

Affected Products

VendorProductVersionsPlatforms
Microsoftvers:microsoft/6.2.9200.25423
Microsoftvers:microsoft/6.3.9600.22523
Microsoftvers:microsoft/10.0.17763.7137
Microsoftvers:microsoft/10.0.22621.5191
Microsoftvers:microsoft/10.0.26100.3775
Microsoftvers:microsoft/unknown
Microsoftvers:microsoft/6.1.7601.27670
Microsoftvers:microsoft/10.0.20348.3454
Microsoftvers:unknown/unknown
Microsoftvers:microsoft/10.0.19045.5737
Microsoftvers:microsoft/10.0.25398.1551
Microsoftvers:microsoft/10.0.22631.5191
Microsoftvers:microsoft/6.0.6003.23220
Microsoftvers:microsoft/10.0.19044.5737
Microsoftvers:microsoft/10.0.14393.7970

References

advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory

Browse GCVE Records

74,355 records in the GCVE database · Updated July 23, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›