VDB

GCVE-110-NCSC-2025-248

GCVE-110-NCSC-2025-248
Advisory PublishedCVSS 8.8/10
Vulnetix · Advisory published August 13, 2025
Microsoft heeft kwetsbaarheden verholpen in Web Deploy.

Weaknesses (CWE)

CWE-502Deserialization of Untrusted DataCWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')

Risk Scores

CVSS 3.1
8.8/10
High · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Affected Products

VendorProductVersionsPlatforms
Microsoftvers:unknown/10.0.2000|<10.0.2001
Microsoftvers:unknown/17.14.0|<17.14.12

References

advisory
advisory
advisory
advisory

Browse GCVE Records

73,443 records in the GCVE database · Updated July 18, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›