GCVE-110-NCSC-2025-315

Advisory PublishedCVSS 8.8/10

Vulnetix · Advisory published October 14, 2025

Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code remotely, posing a significant security risk.

Download JSON Open in Console

Weaknesses (CWE)

CWE-20Improper Input ValidationCWE-125Out-of-bounds ReadCWE-502Deserialization of Untrusted DataCWE-416Use After FreeCWE-843Access of Resource Using Incompatible Type ('Type Confusion')CWE-248Uncaught Exception

Risk Scores

CVSS 3.1

8.8/10

High · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions	Platforms
Microsoft	vers:unknown/*	—	—

Aliases

CVE-2025-59221 CVE-2025-59222 CVE-2025-59223 CVE-2025-59224 CVE-2025-59225 CVE-2025-59226 CVE-2025-59227 CVE-2025-59228 CVE-2025-59229 CVE-2025-59231 CVE-2025-59232 CVE-2025-59233 CVE-2025-59234 CVE-2025-59235 CVE-2025-59236 CVE-2025-59237 CVE-2025-59238 CVE-2025-59243

References

advisory

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON