VDB
GCVE-110-NCSC-2025-215
GCVE-110-NCSC-2025-215
Advisory PublishedCVSS 5.5/10
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Weaknesses (CWE)
CWE-502Deserialization of Untrusted DataCWE-125Out-of-bounds ReadCWE-416Use After FreeCWE-122Heap-based Buffer OverflowCWE-843Access of Resource Using Incompatible Type ('Type Confusion')CWE-280Improper Handling of Insufficient Permissions or PrivilegesCWE-285Improper AuthorizationCWE-94Improper Control of Generation of Code ('Code Injection')CWE-287Improper AuthenticationCWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Risk Scores
CVSS 3.1
5.5/10
Medium · CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Microsoft | vers:unknown/16.0.1|<16.0.5508.1000 | — | — |
| Microsoft | vers:unknown/2.0.0|<7.10.1(100772025102901) | — | — |
| Microsoft | vers:unknown/16.0.1|<16.0.19029.20000 | — | — |
| Microsoft | vers:unknown/1.0.0|<25060212643 | — | — |
| Microsoft | vers:unknown/19.0.0|<https://aka.ms/officesecurityreleases | — | — |
| Microsoft | vers:unknown/16.0.0.0|<16.0.5508.1002 | — | — |
| Microsoft | vers:unknown/16.0.0|<16.0.5508.1000 | — | — |
| Microsoft | vers:unknown/16.0.0|<16.0.18526.20424 | — | — |
| Microsoft | vers:unknown/1.0.0.0|<25163.3001.3726.6503 | — | — |
| Microsoft | vers:unknown/1.0.0|<https://aka.ms/officesecurityreleases | — | — |
| Microsoft | vers:unknown/16.0.1|<16.0.5508.1001 | — | — |
| Microsoft | vers:unknown/n/a | — | — |
| Microsoft | vers:unknown/16.0.0.0|<16.0.5508.1001 | — | — |
| Microsoft | vers:unknown/1.0.0|<1.0.0.2025112902 | — | — |
| Microsoft | vers:unknown/1.0.0|<16.0.10417.20027 | — | — |
| Microsoft | vers:unknown/16.0.0|<16.0.5508.1001 | — | — |
| Microsoft | vers:unknown/16.0.0|<16.0.10417.20027 | — | — |
| Microsoft | vers:unknown/16.0.1|<https://aka.ms/officesecurityreleases | — | — |
Browse GCVE Records
75,874 records in the GCVE database · Updated August 4, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.