GCVE-110-NCSC-2026-473

Weaknesses (CWE)

CWE-426Untrusted Search PathCWE-640Weak Password Recovery Mechanism for Forgotten PasswordCWE-639Authorization Bypass Through User-Controlled KeyCWE-862Missing AuthorizationCWE-1021Improper Restriction of Rendered UI Layers or FramesCWE-121Stack-based Buffer OverflowCWE-116Improper Encoding or Escaping of OutputCWE-407Inefficient Algorithmic ComplexityCWE-352Cross-Site Request ForgeryCWE-918Server-Side Request ForgeryCWE-863Incorrect AuthorizationCWE-401Missing Release of Memory after Effective LifetimeCWE-770Allocation of Resources Without Limits or ThrottlingCWE-908Use of Uninitialized ResourceCWE-367Time-of-check Time-of-use (TOCTOU) Race ConditionCWE-41Improper Resolution of Path EquivalenceCWE-362Concurrent Execution using Shared Resource with Improper SynchronizationCWE-122Heap-based Buffer OverflowCWE-451User Interface (UI) Misrepresentation of Critical InformationCWE-636Not Failing SecurelyCWE-79Improper Neutralization of Input During Web Page GenerationCWE-73External Control of File Name or PathCWE-306Missing Authentication for Critical FunctionalityCWE-379Creation of Temporary File in Directory with Insecure PermissionsCWE-94Improper Control of Generation of CodeCWE-184Incomplete List of Disallowed InputsCWE-77Improper Neutralization of Special Elements used in a CommandCWE-501Trust Boundary Violation

Risk Scores

CVSS 3.1

8.8/10

High · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L/E:U/RL:O/RC:C

Affected Products

Vendor	Product	Versions	Platforms
Microsoft	vers:unknown/*	—	—

References

advisory

Browse GCVE Records

851 records in the GCVE database · Updated November 12, 2026

No matching records found.