GCVE-110-NCSC-2025-155

Advisory PublishedCVSS 7.0/10

Vulnetix · Advisory published May 13, 2025

Microsoft heeft kwetsbaarheden verholpen in diverse Office producten.

Weaknesses (CWE)

CWE-269Improper Privilege ManagementCWE-502Deserialization of Untrusted DataCWE-416Use After FreeCWE-122Heap-based Buffer OverflowCWE-843Access of Resource Using Incompatible Type ('Type Confusion')CWE-125Out-of-bounds ReadCWE-763Release of Invalid Pointer or ReferenceCWE-126Buffer Over-read

Risk Scores

CVSS 3.1

7.0/10

High · CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions	Platforms
Microsoft	vers:unknown/2021 ltsc	—	—
Microsoft	vers:microsoft/unknown	—	—
Microsoft	vers:unknown/2019	—	—
Microsoft	vers:unknown/unknown	—	—

Aliases

CVE-2025-29976 CVE-2025-29977 CVE-2025-29978 CVE-2025-29979 CVE-2025-30375 CVE-2025-30376 CVE-2025-30377 CVE-2025-30378 CVE-2025-30379 CVE-2025-30381 CVE-2025-30382 CVE-2025-30383 CVE-2025-30384 CVE-2025-30386 CVE-2025-30388 CVE-2025-30393 CVE-2025-32704 CVE-2025-32705

References

advisory

Browse GCVE Records

73,873 records in the GCVE database · Updated July 20, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON