GCVE-110-NCSC-2025-384

Advisory PublishedCVSS 7.8/10

Vulnetix · Advisory published December 9, 2025

Relative path traversal vulnerabilities in Microsoft Office Access allow unauthorized attackers to execute code on local systems, posing a significant security risk.

Download JSON Open in Console

Weaknesses (CWE)

CWE-23Relative Path TraversalCWE-416Use After FreeCWE-843Access of Resource Using Incompatible Type ('Type Confusion')CWE-822Untrusted Pointer DereferenceCWE-126Buffer Over-readCWE-125Out-of-bounds ReadCWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Risk Scores

CVSS 3.1

7.8/10

High · CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Affected Products

Vendor	Product	Versions	Platforms
Microsoft	vers:unknown/*	—	—

Aliases

CVE-2025-62552 CVE-2025-62553 CVE-2025-62554 CVE-2025-62555 CVE-2025-62556 CVE-2025-62557 CVE-2025-62558 CVE-2025-62559 CVE-2025-62560 CVE-2025-62561 CVE-2025-62562 CVE-2025-62563 CVE-2025-62564 CVE-2025-64672

References

advisory

Browse GCVE Records

72,664 records in the GCVE database · Updated July 15, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON