VDB

GCVE-110-NCSC-2025-250

GCVE-110-NCSC-2025-250
Advisory PublishedCVSS 7.8/10
Vulnetix · Advisory published August 13, 2025
Microsoft heeft kwetsbaarheden verholpen in Microsoft Office (inclusief SharePoint, Visio, Word, Excel en PowerPoint).

Weaknesses (CWE)

CWE-502Deserialization of Untrusted DataCWE-416Use After FreeCWE-122Heap-based Buffer OverflowCWE-681Incorrect Conversion between Numeric TypesCWE-126Buffer Over-readCWE-843Access of Resource Using Incompatible Type ('Type Confusion')CWE-908Use of Uninitialized ResourceCWE-918Server-Side Request Forgery (SSRF)

Risk Scores

CVSS 3.1
7.8/10
High · CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Affected Products

VendorProductVersionsPlatforms
Microsoftvers:unknown/16.0.0.0|<16.0.5513.1000
Microsoftvers:unknown/19.0.0|<https://aka.ms/officesecurityreleases
Microsoftvers:microsoft/unknown
Microsoftvers:microsoft/16.0.5513.1000 2016 on x86 64
Microsoftvers:microsoft/16.0.5513.1000 on x86 64
Microsoftvers:unknown/enterprise on x86 64
Microsoftvers:unknown/1.0.0|<https://aka.ms/officesecurityreleases
Microsoftvers:unknown/enterprise on x86
Microsoftvers:microsoft/16.0.5513.1000 2016 on x86
Microsoftvers:microsoft/16.0.5513.1000 on x86
Microsoftvers:unknown/16.0.0|<16.0.5513.1000
Microsoftvers:unknown/16.0.1|<https://aka.ms/officesecurityreleases

References

advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory

Browse GCVE Records

74,132 records in the GCVE database · Updated July 20, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›