VDB

GCVE-VVD-NCSC-2025-107

GCVE-VVD-NCSC-2025-107
Advisory PublishedCVSS 7.8/10
Vulnetix · Advisory published April 8, 2025
Microsoft heeft kwetsbaarheden verholpen in diverse Office producten.

Weaknesses (CWE)

CWE-125Out-of-bounds ReadCWE-416Use After FreeCWE-284Improper Access ControlCWE-822Untrusted Pointer DereferenceCWE-122Heap-based Buffer OverflowCWE-843Access of Resource Using Incompatible Type ('Type Confusion')CWE-502Deserialization of Untrusted DataCWE-285Improper AuthorizationCWE-269Improper Privilege ManagementCWE-276Incorrect Default PermissionsCWE-349Acceptance of Extraneous Untrusted Data With Trusted DataCWE-184Incomplete List of Disallowed Inputs

Risk Scores

CVSS 3.1
7.8/10
High · CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Affected Products

VendorProductVersionsPlatforms
Microsoftvers:microsoft/unknown——
Microsoftvers:microsoft/2021——
Microsoftvers:microsoft/10.0.14393.7970——
Microsoftvers:microsoft/10.0.17763.7137——
Microsoftvers:microsoft/10.0.19044.5737——
Microsoftvers:microsoft/10.0.19045.5737——
Microsoftvers:microsoft/10.0.22621.5191——
Microsoftvers:microsoft/10.0.22631.5191——
Microsoftvers:microsoft/10.0.26100.3775——
Microsoftvers:microsoft/6.1.7601.27670——
Microsoftvers:microsoft/6.0.6003.23220——
Microsoftvers:microsoft/6.2.9200.25423——
Microsoftvers:microsoft/6.3.9600.22523——
Microsoftvers:microsoft/10.0.20348.3454——
Microsoftvers:microsoft/10.0.25398.1551——

Aliases

Transitive aliases

EUVD-2025-10182EUVD-2025-10241EUVD-2025-10207VVD-CISA-2025-26644EUVD-2025-10208BDU:2025-04059EUVD-2025-10157BDU:2025-04055MSRC_CVE-2025-27744CVE-2025-27479BDU:2025-04626BDU:2025-04245BDU:2025-04060EUVD-2025-10159GHSA-v3mw-3vwm-c6c7VVD-CISA-2025-26648BDU:2025-04128CVE-2025-24058CVE-2025-27477BDU:2025-04200VVD-CISA-2025-27748GHSA-wjr6-rfwf-wx2fCVE-2025-27741EUVD-2025-10141VVD-CISA-2025-29792GHSA-c4pv-p44r-9xfcVVD-CISA-2025-27736EUVD-2025-10133VVD-CISA-2025-21205VVD-CISA-2025-29811GHSA-wvg7-cvgq-hhh3BDU:2025-04221EUVD-2025-10203BDU:2025-04174GHSA-2gwg-wcpq-6h7gCVE-2025-27492GHSA-w87f-mr23-wrp9GHSA-c3xg-4h7v-p83wBDU:2025-04225CVE-2025-26663VVD-CISA-2025-27735VVD-CISA-2025-21203GHSA-f5m3-pwfc-3wq8EUVD-2025-10209BDU:2025-04053BDU:2025-04116CVE-2025-26665EUVD-2025-10187GHSA-47qr-4ffm-5qm9EUVD-2025-10230BDU:2025-04207GHSA-x7g5-wpm2-r3jmBDU:2025-04126CVE-2025-26647CVE-2025-27474MSRC_CVE-2025-21174BDU:2025-04099EUVD-2025-10206BDU:2025-04100VVD-CISA-2025-26672VVD-CISA-2025-24058BDU:2025-04052VVD-CISA-2025-27476BDU:2025-04235VVD-CISA-2025-26669VVD-CISA-2025-26679VVD-CISA-2025-24073GHSA-3w3r-78f2-2x8vBDU:2025-04121GHSA-xwxw-9gfj-g2c9VVD-CISA-2025-21191EUVD-2025-10113CVE-2025-29812VVD-CISA-2025-26666GHSA-443w-gf2f-8h6xGHSA-f5p6-vmgq-f9qwVVD-CISA-2025-27474BDU:2025-04111BDU:2025-04056BDU:2025-04261CNVD-2025-10659CVE-2025-21221CVE-2025-26688BDU:2025-04246EUVD-2025-10243EUVD-2025-10155BDU:2025-04041BDU:2025-04979GHSA-923v-g26h-29fjBDU:2025-04108EUVD-2025-10117CVE-2025-26678CVE-2025-26672CVE-2025-26649BDU:2025-04237GHSA-w5wx-73w5-58mwBDU:2025-04975GHSA-f69r-g2v6-6r6hGHSA-7px8-2cr8-7p32CVE-2025-27730CVE-2025-26666GHSA-m8g5-jr5h-6c6fBDU:2025-04205EUVD-2025-10233CVE-2025-27728CVE-2025-21191MSRC_CVE-2025-27752CVE-2025-21174BDU:2025-04202GHSA-c8q9-g877-5qr3BDU:2025-04097GHSA-m8qx-v899-58w7MSRC_CVE-2025-27750BDU:2025-04976GHSA-2j6p-wf3v-2mvpGHSA-m46h-3mqp-xh9wVVD-CISA-2025-24060VVD-CISA-2025-29812BDU:2025-04048VVD-CISA-2025-29801EUVD-2025-10115CVE-2025-26648VVD-CISA-2025-27492VVD-CISA-2025-21222EUVD-2025-10131GHSA-p9qw-h5h2-6vw8GHSA-f4pv-mh4w-365xGHSA-4f3f-qmwc-952fGHSA-jjwr-7vqh-8gf4MSRC_CVE-2025-21191CVE-2025-21222VVD-CISA-2025-27473EUVD-2025-10161VVD-CISA-2025-27732BDU:2025-04262BDU:2025-04105GHSA-46hp-9p3c-5jghGHSA-x599-jjw8-g5vwEUVD-2025-10125GHSA-p34p-m244-f7ppVVD-CISA-2025-26663BDU:2025-04239BDU:2025-04051EUVD-2025-10136EUVD-2025-10185EUVD-2025-10225VVD-CISA-2025-21204GHSA-c538-wc2q-4rmxGHSA-hrxg-42v2-hfvmBDU:2025-04219CVE-2025-27742GHSA-6v62-cvf7-mpv3EUVD-2025-10124BDU:2025-04217CVE-2025-26644EUVD-2025-10181EUVD-2025-10183GHSA-h7rc-mcrm-p3mhGHSA-w3h4-x33c-8cc8GHSA-76h8-9q54-37ccGHSA-j923-xmpp-p4g8CVE-2025-26680CVE-2025-26637BDU:2025-04241MSRC_CVE-2025-21205EUVD-2025-10167VVD-CISA-2025-27729BDU:2025-04168VVD-CISA-2025-24062BDU:2025-04137VVD-CISA-2025-27746GHSA-89pp-mprf-p328EUVD-2025-10215BDU:2025-04054GHSA-f777-q5j9-qjx5EUVD-2025-10232BDU:2025-04120EUVD-2025-10186GHSA-7883-gj3f-26q9EUVD-2025-10218VVD-CISA-2025-26680BDU:2025-04098MSRC_CVE-2025-27746GHSA-jpmv-9x86-xvwcBDU:2025-03926VVD-CISA-2025-26676CNVD-2025-10614CVE-2025-27737EUVD-2025-10204VVD-CISA-2025-29823BDU:2025-04249GHSA-2f5r-r4jx-hh42VVD-CISA-2025-26686BDU:2025-04107GHSA-9qpr-rvwc-j2wcEUVD-2025-10135CVE-2025-26673GHSA-xp88-vp78-mqm7VVD-CISA-2025-27479MSRC_CVE-2025-21197BDU:2025-04196CVE-2025-27471CVE-2025-27476CVE-2025-27485VVD-CISA-2025-21221EUVD-2025-10242BDU:2025-04228CVE-2025-27470VVD-CISA-2025-26670EUVD-2025-10151EUVD-2025-10224GHSA-2hrp-x9mq-5qp2EUVD-2025-10142VVD-CISA-2025-21197GHSA-g3jg-gq9w-rmh8VVD-CISA-2025-27471BDU:2025-04204EUVD-2025-10152BDU:2025-04247EUVD-2025-10166EUVD-2025-10244CVE-2025-24074CVE-2025-21204VVD-CISA-2025-21174EUVD-2025-10216VVD-CISA-2025-29808CVE-2025-26641GHSA-vm5w-p85f-gq6rGHSA-h9r9-jmq5-x5whEUVD-2025-10184EUVD-2025-10220GHSA-8844-88f7-3mwfCVE-2025-21197GHSA-wq4m-7cp4-8jggVVD-CISA-2025-26687EUVD-2025-10222EUVD-2025-10211EUVD-2025-10195EUVD-2025-10219BDU:2025-04122GHSA-c6h2-xp45-96cvEUVD-2025-10227VVD-CISA-2025-26642CVE-2025-24062CVE-2025-29808VVD-CISA-2025-26673BDU:2025-04118CVE-2025-27475EUVD-2025-10226BDU:2025-04208EUVD-2025-10146CVE-2025-27478EUVD-2025-10217EUVD-2025-10144EUVD-2025-10168BDU:2025-04215CVE-2025-27729CVE-2025-27484EUVD-2025-10170VVD-CISA-2025-27475EUVD-2025-10245BDU:2025-04220EUVD-2025-10150GHSA-h8h5-8pv5-88g9VVD-CISA-2025-26681VVD-CISA-2025-29794BDU:2025-04240BDU:2025-04982GHSA-jc9x-pxc5-cq7fCVE-2025-27735GHSA-959p-rfmc-j2w3VVD-CISA-2025-27738MSRC_CVE-2025-27745EUVD-2025-10139CVE-2025-27483CVE-2025-26640VVD-CISA-2025-27731GHSA-4j9p-mgjx-whjqVVD-CISA-2025-26667GHSA-ghmp-5866-2jgfGHSA-7q5w-7fpv-35wjEUVD-2025-10247GHSA-pqgf-8vrh-rr46EUVD-2025-10137BDU:2025-04250CVE-2025-26676BDU:2025-04114EUVD-2025-10236CVE-2025-27733CVE-2025-26652BDU:2025-04242EUVD-2025-10188EUVD-2025-10143CVE-2025-29824BDU:2025-04198BDU:2025-04243BDU:2025-04218BDU:2025-04106EUVD-2025-10248GHSA-xcw6-8574-9qv2CVE-2025-26671GHSA-jrp5-65w7-pcg2EUVD-2025-10237VVD-CISA-2025-29791BDU:2025-04199GHSA-p5vq-38hr-952cMSRC_CVE-2025-27748CVE-2025-26668VVD-CISA-2025-26639EUVD-2025-10179CNVD-2025-10658GHSA-v4v5-73p4-rg59GHSA-5v5h-mr5g-h898VVD-CISA-2025-27480CVE-2025-21205CVE-2025-26675BDU:2025-04216GHSA-cwwx-grqm-7hjhEUVD-2025-10126VVD-CISA-2025-27751CVE-2025-27473CVE-2025-26639EUVD-2025-10173BDU:2025-04061CNVD-2025-10660VVD-CISA-2025-27752MSRC_CVE-2025-27751GHSA-ffww-3j7j-g93qVVD-CISA-2025-27478VVD-CISA-2025-27467BDU:2025-04253EUVD-2025-10189EUVD-2025-10122GHSA-f687-cpxh-93rhBDU:2025-04143EUVD-2025-10194GHSA-5vwc-px2m-7jxgVVD-CISA-2025-26678GHSA-fh3v-p8r7-f9p8VVD-CISA-2025-29809GHSA-cp6c-ff57-294gGHSA-47xw-2q7j-49hwVVD-CISA-2025-26649GHSA-fhf5-q9qm-767wBDU:2025-04227BDU:2025-04124GHSA-q84m-7mh3-gvhwVVD-CISA-2025-27484GHSA-gr4c-v8p7-98x2CVE-2025-29811GHSA-cvhq-cvvf-jw9rEUVD-2025-10246VVD-CISA-2025-26668MSRC_CVE-2025-26642VVD-CISA-2025-29793BDU:2025-04040CVE-2025-26674CVE-2025-27487GHSA-qjm7-f9mj-293hVVD-CISA-2025-26671GHSA-6hhr-6xwm-4f6jCVE-2025-26679CVE-2025-27486BDU:2025-04135VVD-CISA-2025-27733GHSA-wr29-5553-rrh3CVE-2025-27480EUVD-2025-10129CVE-2025-27469EUVD-2025-10240GHSA-w4rq-mvcf-xc7hMSRC_CVE-2025-27747CVE-2025-27736GHSA-2hgf-545p-qvj7EUVD-2025-10172EUVD-2025-10164GHSA-6mpr-rpj5-q557GHSA-qm95-22pj-qx7vVVD-CISA-2025-26688VVD-CISA-2025-27739VVD-CISA-2025-26665BDU:2025-04206MSRC_CVE-2025-21204EUVD-2025-10130GHSA-hgp6-f396-gg6vVVD-NCSC-2025-112CVE-2025-27490CVE-2025-27740CVE-2025-26667EUVD-2025-10154EUVD-2025-10228CVE-2025-26686GHSA-fg42-rvmc-ccpvVVD-CISA-2025-26640GHSA-429q-ccqc-32wqVVD-CISA-2025-26637VVD-CISA-2025-27470BDU:2025-04101VVD-CISA-2025-26675VVD-CISA-2025-27728VVD-CISA-2025-27472BDU:2025-04978EUVD-2025-10221CVE-2025-26670EUVD-2025-10214BDU:2025-04203BDU:2025-04123VVD-CISA-2025-26664BDU:2025-04115BDU:2025-04983EUVD-2025-10212VVD-CISA-2025-27745CVE-2025-29809VVD-CISA-2025-26651BDU:2025-04236VVD-CISA-2025-27742CVE-2025-27727BDU:2025-04244BDU:2025-04102GHSA-35q9-q5hh-hmc4BDU:2025-04117VVD-CISA-2025-26674GHSA-xc3h-9j86-jpjhVVD-CISA-2025-27469CNVD-2025-10608CVE-2025-26664CVE-2025-27472EUVD-2025-10239EUVD-2025-10210CVE-2025-26681BDU:2025-04977EUVD-2025-10229VVD-CISA-2025-29810EUVD-2025-10120CNVD-2025-10661GHSA-x998-4j8c-4fq3EUVD-2025-10153BDU:2025-04259VVD-CISA-2025-29824EUVD-2025-10149CNVD-2025-07784CNVD-2025-07783VVD-CISA-2025-27750BDU:2025-04226CVE-2025-26635BDU:2025-04197EUVD-2025-10162GHSA-mx35-q7v3-5rh9EUVD-2025-10223EUVD-2025-10118VVD-CISA-2025-27482GHSA-79xr-cjjw-p6f2GHSA-f88r-vjvm-q77mVVD-CISA-2025-27741CVE-2025-27738GHSA-74mq-6c57-fxpxEUVD-2025-10163VVD-CISA-2025-27730BDU:2025-04104EUVD-2025-10140GHSA-cv6v-q3qg-36vrGHSA-v2ph-qcjx-gh8gBDU:2025-04248VVD-CISA-2025-27477GHSA-4x7q-6v7j-m3g9BDU:2025-04209GHSA-4f8x-f25f-pp6rCNVD-2025-10609GHSA-9qjc-6fwg-p54rEUVD-2025-10156VVD-CISA-2025-27740MSRC_CVE-2025-21221VVD-CISA-2025-27737VVD-CISA-2025-29800VVD-CISA-2025-27727VVD-CISA-2025-27485VVD-CISA-2025-24074VVD-CISA-2025-26652GHSA-vg94-crh4-qq4xEUVD-2025-10158CVE-2025-27732EUVD-2025-10213GHSA-8wgx-9672-jj5jEUVD-2025-10235EUVD-2025-10205MSRC_CVE-2025-21203CVE-2025-27491BDU:2025-04233BDU:2025-04169VVD-CISA-2025-27491GHSA-ccx5-jh35-2p3cCVE-2025-24073GHSA-xr7q-639h-425qVVD-CISA-2025-27747EUVD-2025-10134BDU:2025-04255VVD-CISA-2025-26641EUVD-2025-10160GHSA-6fgm-cc65-9jj3VVD-CISA-2025-27749CVE-2025-27739VVD-CISA-2025-27486VVD-CISA-2025-26635VVD-CISA-2025-27487CVE-2025-27481VVD-CISA-2025-27483GHSA-7qv7-c4h7-rw9mBDU:2025-04049CVE-2025-29810EUVD-2025-10148EUVD-2025-10238GHSA-25m2-7f7f-p53mBDU:2025-04180VVD-CISA-2025-26647GHSA-7fqc-4xq7-ghg5GHSA-v269-fhhx-vf6jBDU:2025-04057BDU:2025-04254BDU:2025-04103EUVD-2025-10121CVE-2025-27731BDU:2025-04062VVD-CISA-2025-27481EUVD-2025-10119GHSA-473g-6pv5-56gcEUVD-2025-10138VVD-CISA-2025-27744BDU:2025-04229CVE-2025-27467CVE-2025-27482EUVD-2025-10145CVE-2025-21203EUVD-2025-10176GHSA-9c5m-4mvh-2p3vVVD-CISA-2025-29820CVE-2025-26669GHSA-gjc7-752x-rr86CVE-2025-24060BDU:2025-04234EUVD-2025-10123BDU:2025-04046MSRC_CVE-2025-21222CNVD-2025-10610VVD-CISA-2025-29822BDU:2025-04238VVD-CISA-2025-27490BDU:2025-04230VVD-CISA-2025-29816BDU:2025-04981GHSA-j233-wqrg-q9v9BDU:2025-04047CVE-2025-26651

References

advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory

Browse GCVE Records

1,867 records in the GCVE database · Updated October 2, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›