GCVE-110-NCSC-2025-359

Advisory PublishedCVSS 7.1/10

Vulnetix · Advisory published November 11, 2025

Deserialization of untrusted data in Microsoft Office SharePoint can allow an authorized attacker to execute code remotely, posing a significant security risk.

Download JSON Open in Console

Weaknesses (CWE)

CWE-125Out-of-bounds ReadCWE-822Untrusted Pointer DereferenceCWE-122Heap-based Buffer OverflowCWE-416Use After FreeCWE-200Exposure of Sensitive Information to an Unauthorized ActorCWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')CWE-502Deserialization of Untrusted Data

Risk Scores

CVSS 3.1

7.1/10

High · CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C

Affected Products

Vendor	Product	Versions	Platforms
Microsoft	vers:unknown/*	—	—

Aliases

CVE-2025-59240 CVE-2025-60722 CVE-2025-60724 CVE-2025-60726 CVE-2025-60727 CVE-2025-60728 CVE-2025-62199 CVE-2025-62200 CVE-2025-62201 CVE-2025-62202 CVE-2025-62203 CVE-2025-62204 CVE-2025-62205 CVE-2025-62216

References

advisory

Browse GCVE Records

417 records in the GCVE database · Updated August 26, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON