VDB
GCVE-110-NCSC-2025-159
GCVE-110-NCSC-2025-159
Advisory PublishedCVSS 8.8/10
Microsoft heeft kwetsbaarheden verholpen in Windows.
Weaknesses (CWE)
CWE-908Use of Uninitialized ResourceCWE-125Out-of-bounds ReadCWE-122Heap-based Buffer OverflowCWE-367Time-of-check Time-of-use (TOCTOU) Race ConditionCWE-269Improper Privilege ManagementCWE-416Use After FreeCWE-20Improper Input ValidationCWE-59Improper Link Resolution Before File Access ('Link Following')CWE-121Stack-based Buffer OverflowCWE-349Acceptance of Extraneous Untrusted Data With Trusted DataCWE-400Uncontrolled Resource ConsumptionCWE-126Buffer Over-readCWE-843Access of Resource Using Incompatible Type ('Type Confusion')CWE-591Sensitive Data Storage in Improperly Locked MemoryCWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')CWE-476NULL Pointer DereferenceCWE-798Use of Hard-coded Credentials
Risk Scores
CVSS 3.1
8.8/10
High · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Microsoft | vers:microsoft/10.0.20348.3692 | — | — |
| Microsoft | vers:unknown/10.0.26100.0|<10.0.26100.4061 | — | — |
| Microsoft | vers:unknown/1.0.0|<16.97.25042725 | — | — |
| Microsoft | vers:microsoft/10.0.19044.5854 arm | — | — |
| Microsoft | vers:unknown/16.0.1|<16.0.18827.20000 | — | — |
| IBM | vers:unknown/* | — | — |
| Microsoft | vers:microsoft/10.0.22621.5335 | — | — |
| Microsoft | vers:unknown/16.0.1|<16.0.14326.22502 | — | — |
| Microsoft | vers:microsoft/unknown | — | — |
| Microsoft | vers:microsoft/6.0.6003.23279 | — | — |
| Microsoft | vers:microsoft/10.0.17763.7314 | — | — |
| Microsoft | vers:microsoft/10.0.22631.5335 | — | — |
| Microsoft | vers:microsoft/10.0.14393.8066 | — | — |
| Microsoft | vers:unknown/10.0.25398.0|<10.0.25398.1611 | — | — |
| Microsoft | vers:unknown/6.3.9600.0|<6.3.9600.22577 | — | — |
| Microsoft | vers:microsoft/10.0.26100.4061 | — | — |
| Microsoft | vers:unknown/16.0.1|<16.97.25042725 | — | — |
| Microsoft | vers:microsoft/6.2.9200.25475 | — | — |
| Microsoft | vers:microsoft/10.0.19045.5854 | — | — |
| Microsoft | vers:microsoft/6.1.7601.27729 | — | — |
| Microsoft | vers:microsoft/10.0.19044.5854 | — | — |
| Microsoft | vers:microsoft/10.0.10240.21014 | — | — |
Aliases
CVE-2025-24063CVE-2025-26677CVE-2025-27468CVE-2025-27488CVE-2025-29829CVE-2025-29830CVE-2025-29831CVE-2025-29832CVE-2025-29833CVE-2025-29835CVE-2025-29836CVE-2025-29837CVE-2025-29838CVE-2025-29839CVE-2025-29840CVE-2025-29841CVE-2025-29842CVE-2025-29954CVE-2025-29955CVE-2025-29956CVE-2025-29957CVE-2025-29958CVE-2025-29959CVE-2025-29960CVE-2025-29961CVE-2025-29962CVE-2025-29963CVE-2025-29964CVE-2025-29966CVE-2025-29967CVE-2025-29968CVE-2025-29969CVE-2025-29970CVE-2025-29971CVE-2025-29974CVE-2025-30385CVE-2025-30388CVE-2025-30394CVE-2025-30397CVE-2025-30400CVE-2025-32701CVE-2025-32706CVE-2025-32707CVE-2025-32709
References
Browse GCVE Records
75,801 records in the GCVE database · Updated August 3, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.