GCVE-110-NCSC-2025-337

Advisory PublishedCVSS 8.8/10

Vulnetix · Advisory published October 23, 2025

Recent updates address multiple security vulnerabilities across various platforms, including WebKitGTK, Oracle Java SE, and Apple operating systems, focusing on memory handling and potential exploitation through malicious web content.

Download JSON Open in Console

Weaknesses (CWE)

CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferCWE-284Improper Access ControlCWE-200Exposure of Sensitive Information to an Unauthorized ActorCWE-862Missing Authorization

Risk Scores

CVSS 3.1

8.8/10

High · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions	Platforms
Oracle	vers:unknown/*	—	—

Aliases

CVE-2025-31257 CVE-2025-53057 CVE-2025-53066 CVE-2025-61748 CVE-2025-61755

References

advisory

Browse GCVE Records

73,866 records in the GCVE database · Updated July 19, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON