VDB

GCVE-110-NCSC-2025-78

GCVE-110-NCSC-2025-78
Advisory PublishedCVSS 7.8/10
Vulnetix · Advisory published March 11, 2025
Microsoft heeft kwetsbaarheden verholpen in Windows.

Weaknesses (CWE)

CWE-591Sensitive Data Storage in Improperly Locked MemoryCWE-284Improper Access ControlCWE-416Use After FreeCWE-125Out-of-bounds ReadCWE-122Heap-based Buffer OverflowCWE-73External Control of File Name or PathCWE-41Improper Resolution of Path EquivalenceCWE-693Protection Mechanism FailureCWE-200Exposure of Sensitive Information to an Unauthorized ActorCWE-532Insertion of Sensitive Information into Log FileCWE-190Integer Overflow or WraparoundCWE-126Buffer Over-readCWE-707Improper NeutralizationCWE-23Relative Path TraversalCWE-59Improper Link Resolution Before File Access ('Link Following')CWE-476NULL Pointer DereferenceCWE-822Untrusted Pointer Dereference

Risk Scores

CVSS 3.1
7.8/10
High · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersionsPlatforms
Microsoftvers:unknown/1.2.0.0|<1.2.6017.0
Microsoftvers:microsoft/10.0.25398.1486 x64
Microsoftvers:unknown/6.2.9200.0|<6.2.9200.25368
Microsoftvers:microsoft/10.0.19045.5608 arm
Microsoftvers:microsoft/10.0.19044.5608 x86
Microsoftvers:unknown/10.0.25398.0|<10.0.25398.1486
Microsoftvers:microsoft/10.0.26100.3476 arm
Microsoftvers:microsoft/10.0.17763.7009 x64
Microsoftvers:microsoft/10.0.19045.5608 x64
Microsoftvers:unknown/6.3.9600.0|<6.3.9600.22470
Microsoftvers:unknown/10.0.14393.0|<10.0.14393.7876
Microsoftvers:microsoft/10.0.26100.3476 x64
Microsoftvers:microsoft/10.0.14393.7876 x64
Microsoftvers:microsoft/10.0.17763.7009 x86
Microsoftvers:unknown/10.0.10240.0|<10.0.10240.20947
Microsoftvers:microsoft/10.0.22621.5039 x64
Microsoftvers:microsoft/10.0.19044.5608 x64
Microsoftvers:microsoft/10.0.22631.5039 x64
Microsoftvers:microsoft/10.0.22621.5039 arm
Microsoftvers:unknown/10.0.22621.0|<10.0.22621.5039
Microsoftvers:microsoft/10.0.14393.7876 x86
Microsoftvers:unknown/10.0.26100.0|<10.0.26100.3476
Microsoftvers:microsoft/10.0.19044.5608 arm
Microsoftvers:unknown/unknown
Microsoftvers:microsoft/10.0.20348.3328 x64
Microsoftvers:unknown/1.00|<2.0.365.0
Microsoftvers:microsoft/10.0.19045.5608 x86
Microsoftvers:unknown/10.0.20348.0|<10.0.20348.3328
Microsoftvers:unknown/6.1.7601.0|<6.1.7601.27618
Microsoftvers:microsoft/10.0.22631.5039 arm
Microsoftvers:unknown/10.0.19045.0|<10.0.19045.5608
Microsoftvers:microsoft/10.0.10240.20947 x64
Microsoftvers:unknown/10.0.17763.0|<10.0.17763.7009
Microsoftvers:unknown/10.0.19043.0|<10.0.19044.5608
Microsoftvers:unknown/6.0.6003.0|<6.0.6003.23168
Microsoftvers:microsoft/6.3.9600.22470 x64
Microsoftvers:microsoft/10.0.10240.20947 x86
Microsoftvers:unknown/10.0.22631.0|<10.0.22631.5039
Microsoftvers:microsoft/6.2.9200.25368 x64

References

advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory

Browse GCVE Records

74,355 records in the GCVE database · Updated July 23, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›