VDB

GCVE-VVD-NCSC-2025-107

GCVE-VVD-NCSC-2025-107
Advisory PublishedCVSS 7.8/10
Vulnetix · Advisory published April 8, 2025
Microsoft heeft kwetsbaarheden verholpen in diverse Office producten.

Weaknesses (CWE)

CWE-125Out-of-bounds ReadCWE-416Use After FreeCWE-284Improper Access ControlCWE-822Untrusted Pointer DereferenceCWE-122Heap-based Buffer OverflowCWE-843Access of Resource Using Incompatible Type ('Type Confusion')CWE-502Deserialization of Untrusted DataCWE-285Improper AuthorizationCWE-269Improper Privilege ManagementCWE-276Incorrect Default PermissionsCWE-349Acceptance of Extraneous Untrusted Data With Trusted DataCWE-184Incomplete List of Disallowed Inputs

Risk Scores

CVSS 3.1
7.8/10
High · CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Affected Products

VendorProductVersionsPlatforms
Microsoftvers:microsoft/unknown
Microsoftvers:microsoft/2021
Microsoftvers:microsoft/10.0.14393.7970
Microsoftvers:microsoft/10.0.17763.7137
Microsoftvers:microsoft/10.0.19044.5737
Microsoftvers:microsoft/10.0.19045.5737
Microsoftvers:microsoft/10.0.22621.5191
Microsoftvers:microsoft/10.0.22631.5191
Microsoftvers:microsoft/10.0.26100.3775
Microsoftvers:microsoft/6.1.7601.27670
Microsoftvers:microsoft/6.0.6003.23220
Microsoftvers:microsoft/6.2.9200.25423
Microsoftvers:microsoft/6.3.9600.22523
Microsoftvers:microsoft/10.0.20348.3454
Microsoftvers:microsoft/10.0.25398.1551

Aliases

Transitive aliases

EUVD-2025-10182EUVD-2025-10241EUVD-2025-10207VVD-CISA-2025-26644EUVD-2025-10208BDU:2025-04059EUVD-2025-10157BDU:2025-04055MSRC_CVE-2025-27744CVE-2025-27479BDU:2025-04626BDU:2025-04245BDU:2025-04060EUVD-2025-10159GHSA-v3mw-3vwm-c6c7VVD-CISA-2025-26648BDU:2025-04128CVE-2025-24058CVE-2025-27477BDU:2025-04200VVD-CISA-2025-27748GHSA-wjr6-rfwf-wx2fCVE-2025-27741EUVD-2025-10141VVD-CISA-2025-29792GHSA-c4pv-p44r-9xfcVVD-CISA-2025-27736EUVD-2025-10133VVD-CISA-2025-21205VVD-CISA-2025-29811GHSA-wvg7-cvgq-hhh3BDU:2025-04221EUVD-2025-10203BDU:2025-04174GHSA-2gwg-wcpq-6h7gCVE-2025-27492GHSA-w87f-mr23-wrp9GHSA-c3xg-4h7v-p83wBDU:2025-04225CVE-2025-26663VVD-CISA-2025-27735VVD-CISA-2025-21203GHSA-f5m3-pwfc-3wq8EUVD-2025-10209BDU:2025-04053BDU:2025-04116CVE-2025-26665EUVD-2025-10187GHSA-47qr-4ffm-5qm9EUVD-2025-10230BDU:2025-04207GHSA-x7g5-wpm2-r3jmBDU:2025-04126CVE-2025-26647CVE-2025-27474MSRC_CVE-2025-21174BDU:2025-04099EUVD-2025-10206BDU:2025-04100VVD-CISA-2025-26672VVD-CISA-2025-24058BDU:2025-04052VVD-CISA-2025-27476BDU:2025-04235VVD-CISA-2025-26669VVD-CISA-2025-26679VVD-CISA-2025-24073GHSA-3w3r-78f2-2x8vBDU:2025-04121GHSA-xwxw-9gfj-g2c9VVD-CISA-2025-21191EUVD-2025-10113CVE-2025-29812VVD-CISA-2025-26666GHSA-443w-gf2f-8h6xGHSA-f5p6-vmgq-f9qwVVD-CISA-2025-27474BDU:2025-04111BDU:2025-04056BDU:2025-04261CNVD-2025-10659CVE-2025-21221CVE-2025-26688BDU:2025-04246EUVD-2025-10243EUVD-2025-10155BDU:2025-04041BDU:2025-04979GHSA-923v-g26h-29fjBDU:2025-04108EUVD-2025-10117CVE-2025-26678CVE-2025-26672CVE-2025-26649BDU:2025-04237GHSA-w5wx-73w5-58mwBDU:2025-04975GHSA-f69r-g2v6-6r6hGHSA-7px8-2cr8-7p32CVE-2025-27730CVE-2025-26666GHSA-m8g5-jr5h-6c6fBDU:2025-04205EUVD-2025-10233CVE-2025-27728CVE-2025-21191MSRC_CVE-2025-27752CVE-2025-21174BDU:2025-04202GHSA-c8q9-g877-5qr3BDU:2025-04097GHSA-m8qx-v899-58w7MSRC_CVE-2025-27750BDU:2025-04976GHSA-2j6p-wf3v-2mvpGHSA-m46h-3mqp-xh9wVVD-CISA-2025-24060VVD-CISA-2025-29812BDU:2025-04048VVD-CISA-2025-29801EUVD-2025-10115CVE-2025-26648VVD-CISA-2025-27492VVD-CISA-2025-21222EUVD-2025-10131GHSA-p9qw-h5h2-6vw8GHSA-f4pv-mh4w-365xGHSA-4f3f-qmwc-952fGHSA-jjwr-7vqh-8gf4MSRC_CVE-2025-21191CVE-2025-21222VVD-CISA-2025-27473EUVD-2025-10161VVD-CISA-2025-27732BDU:2025-04262BDU:2025-04105GHSA-46hp-9p3c-5jghGHSA-x599-jjw8-g5vwEUVD-2025-10125GHSA-p34p-m244-f7ppVVD-CISA-2025-26663BDU:2025-04239BDU:2025-04051EUVD-2025-10136EUVD-2025-10185EUVD-2025-10225VVD-CISA-2025-21204GHSA-c538-wc2q-4rmxGHSA-hrxg-42v2-hfvmBDU:2025-04219CVE-2025-27742GHSA-6v62-cvf7-mpv3EUVD-2025-10124BDU:2025-04217CVE-2025-26644EUVD-2025-10181EUVD-2025-10183GHSA-h7rc-mcrm-p3mhGHSA-w3h4-x33c-8cc8GHSA-76h8-9q54-37ccGHSA-j923-xmpp-p4g8CVE-2025-26680CVE-2025-26637BDU:2025-04241MSRC_CVE-2025-21205EUVD-2025-10167VVD-CISA-2025-27729BDU:2025-04168VVD-CISA-2025-24062BDU:2025-04137VVD-CISA-2025-27746GHSA-89pp-mprf-p328EUVD-2025-10215BDU:2025-04054GHSA-f777-q5j9-qjx5EUVD-2025-10232BDU:2025-04120EUVD-2025-10186GHSA-7883-gj3f-26q9EUVD-2025-10218VVD-CISA-2025-26680BDU:2025-04098MSRC_CVE-2025-27746GHSA-jpmv-9x86-xvwcBDU:2025-03926VVD-CISA-2025-26676CNVD-2025-10614CVE-2025-27737EUVD-2025-10204VVD-CISA-2025-29823BDU:2025-04249GHSA-2f5r-r4jx-hh42VVD-CISA-2025-26686BDU:2025-04107GHSA-9qpr-rvwc-j2wcEUVD-2025-10135CVE-2025-26673GHSA-xp88-vp78-mqm7VVD-CISA-2025-27479MSRC_CVE-2025-21197BDU:2025-04196CVE-2025-27471CVE-2025-27476CVE-2025-27485VVD-CISA-2025-21221EUVD-2025-10242BDU:2025-04228CVE-2025-27470VVD-CISA-2025-26670EUVD-2025-10151EUVD-2025-10224GHSA-2hrp-x9mq-5qp2EUVD-2025-10142VVD-CISA-2025-21197GHSA-g3jg-gq9w-rmh8VVD-CISA-2025-27471BDU:2025-04204EUVD-2025-10152BDU:2025-04247EUVD-2025-10166EUVD-2025-10244CVE-2025-24074CVE-2025-21204VVD-CISA-2025-21174EUVD-2025-10216VVD-CISA-2025-29808CVE-2025-26641GHSA-vm5w-p85f-gq6rGHSA-h9r9-jmq5-x5whEUVD-2025-10184EUVD-2025-10220GHSA-8844-88f7-3mwfCVE-2025-21197GHSA-wq4m-7cp4-8jggVVD-CISA-2025-26687EUVD-2025-10222EUVD-2025-10211EUVD-2025-10195EUVD-2025-10219BDU:2025-04122GHSA-c6h2-xp45-96cvEUVD-2025-10227VVD-CISA-2025-26642CVE-2025-24062CVE-2025-29808VVD-CISA-2025-26673BDU:2025-04118CVE-2025-27475EUVD-2025-10226BDU:2025-04208EUVD-2025-10146CVE-2025-27478EUVD-2025-10217EUVD-2025-10144EUVD-2025-10168BDU:2025-04215CVE-2025-27729CVE-2025-27484EUVD-2025-10170VVD-CISA-2025-27475EUVD-2025-10245BDU:2025-04220EUVD-2025-10150GHSA-h8h5-8pv5-88g9VVD-CISA-2025-26681VVD-CISA-2025-29794BDU:2025-04240BDU:2025-04982GHSA-jc9x-pxc5-cq7fCVE-2025-27735GHSA-959p-rfmc-j2w3VVD-CISA-2025-27738MSRC_CVE-2025-27745EUVD-2025-10139CVE-2025-27483CVE-2025-26640VVD-CISA-2025-27731GHSA-4j9p-mgjx-whjqVVD-CISA-2025-26667GHSA-ghmp-5866-2jgfGHSA-7q5w-7fpv-35wjEUVD-2025-10247GHSA-pqgf-8vrh-rr46EUVD-2025-10137BDU:2025-04250CVE-2025-26676BDU:2025-04114EUVD-2025-10236CVE-2025-27733CVE-2025-26652BDU:2025-04242EUVD-2025-10188EUVD-2025-10143CVE-2025-29824BDU:2025-04198BDU:2025-04243BDU:2025-04218BDU:2025-04106EUVD-2025-10248GHSA-xcw6-8574-9qv2CVE-2025-26671GHSA-jrp5-65w7-pcg2EUVD-2025-10237VVD-CISA-2025-29791BDU:2025-04199GHSA-p5vq-38hr-952cMSRC_CVE-2025-27748CVE-2025-26668VVD-CISA-2025-26639EUVD-2025-10179CNVD-2025-10658GHSA-v4v5-73p4-rg59GHSA-5v5h-mr5g-h898VVD-CISA-2025-27480CVE-2025-21205CVE-2025-26675BDU:2025-04216GHSA-cwwx-grqm-7hjhEUVD-2025-10126VVD-CISA-2025-27751CVE-2025-27473CVE-2025-26639EUVD-2025-10173BDU:2025-04061CNVD-2025-10660VVD-CISA-2025-27752MSRC_CVE-2025-27751GHSA-ffww-3j7j-g93qVVD-CISA-2025-27478VVD-CISA-2025-27467BDU:2025-04253EUVD-2025-10189EUVD-2025-10122GHSA-f687-cpxh-93rhBDU:2025-04143EUVD-2025-10194GHSA-5vwc-px2m-7jxgVVD-CISA-2025-26678GHSA-fh3v-p8r7-f9p8VVD-CISA-2025-29809GHSA-cp6c-ff57-294gGHSA-47xw-2q7j-49hwVVD-CISA-2025-26649GHSA-fhf5-q9qm-767wBDU:2025-04227BDU:2025-04124GHSA-q84m-7mh3-gvhwVVD-CISA-2025-27484GHSA-gr4c-v8p7-98x2CVE-2025-29811GHSA-cvhq-cvvf-jw9rEUVD-2025-10246VVD-CISA-2025-26668MSRC_CVE-2025-26642VVD-CISA-2025-29793BDU:2025-04040CVE-2025-26674CVE-2025-27487GHSA-qjm7-f9mj-293hVVD-CISA-2025-26671GHSA-6hhr-6xwm-4f6jCVE-2025-26679CVE-2025-27486BDU:2025-04135VVD-CISA-2025-27733GHSA-wr29-5553-rrh3CVE-2025-27480EUVD-2025-10129CVE-2025-27469EUVD-2025-10240GHSA-w4rq-mvcf-xc7hMSRC_CVE-2025-27747CVE-2025-27736GHSA-2hgf-545p-qvj7EUVD-2025-10172EUVD-2025-10164GHSA-6mpr-rpj5-q557GHSA-qm95-22pj-qx7vVVD-CISA-2025-26688VVD-CISA-2025-27739VVD-CISA-2025-26665BDU:2025-04206MSRC_CVE-2025-21204EUVD-2025-10130GHSA-hgp6-f396-gg6vVVD-NCSC-2025-112CVE-2025-27490CVE-2025-27740CVE-2025-26667EUVD-2025-10154EUVD-2025-10228CVE-2025-26686GHSA-fg42-rvmc-ccpvVVD-CISA-2025-26640GHSA-429q-ccqc-32wqVVD-CISA-2025-26637VVD-CISA-2025-27470BDU:2025-04101VVD-CISA-2025-26675VVD-CISA-2025-27728VVD-CISA-2025-27472BDU:2025-04978EUVD-2025-10221CVE-2025-26670EUVD-2025-10214BDU:2025-04203BDU:2025-04123VVD-CISA-2025-26664BDU:2025-04115BDU:2025-04983EUVD-2025-10212VVD-CISA-2025-27745CVE-2025-29809VVD-CISA-2025-26651BDU:2025-04236VVD-CISA-2025-27742CVE-2025-27727BDU:2025-04244BDU:2025-04102GHSA-35q9-q5hh-hmc4BDU:2025-04117VVD-CISA-2025-26674GHSA-xc3h-9j86-jpjhVVD-CISA-2025-27469CNVD-2025-10608CVE-2025-26664CVE-2025-27472EUVD-2025-10239EUVD-2025-10210CVE-2025-26681BDU:2025-04977EUVD-2025-10229VVD-CISA-2025-29810EUVD-2025-10120CNVD-2025-10661GHSA-x998-4j8c-4fq3EUVD-2025-10153BDU:2025-04259VVD-CISA-2025-29824EUVD-2025-10149CNVD-2025-07784CNVD-2025-07783VVD-CISA-2025-27750BDU:2025-04226CVE-2025-26635BDU:2025-04197EUVD-2025-10162GHSA-mx35-q7v3-5rh9EUVD-2025-10223EUVD-2025-10118VVD-CISA-2025-27482GHSA-79xr-cjjw-p6f2GHSA-f88r-vjvm-q77mVVD-CISA-2025-27741CVE-2025-27738GHSA-74mq-6c57-fxpxEUVD-2025-10163VVD-CISA-2025-27730BDU:2025-04104EUVD-2025-10140GHSA-cv6v-q3qg-36vrGHSA-v2ph-qcjx-gh8gBDU:2025-04248VVD-CISA-2025-27477GHSA-4x7q-6v7j-m3g9BDU:2025-04209GHSA-4f8x-f25f-pp6rCNVD-2025-10609GHSA-9qjc-6fwg-p54rEUVD-2025-10156VVD-CISA-2025-27740MSRC_CVE-2025-21221VVD-CISA-2025-27737VVD-CISA-2025-29800VVD-CISA-2025-27727VVD-CISA-2025-27485VVD-CISA-2025-24074VVD-CISA-2025-26652GHSA-vg94-crh4-qq4xEUVD-2025-10158CVE-2025-27732EUVD-2025-10213GHSA-8wgx-9672-jj5jEUVD-2025-10235EUVD-2025-10205MSRC_CVE-2025-21203CVE-2025-27491BDU:2025-04233BDU:2025-04169VVD-CISA-2025-27491GHSA-ccx5-jh35-2p3cCVE-2025-24073GHSA-xr7q-639h-425qVVD-CISA-2025-27747EUVD-2025-10134BDU:2025-04255VVD-CISA-2025-26641EUVD-2025-10160GHSA-6fgm-cc65-9jj3VVD-CISA-2025-27749CVE-2025-27739VVD-CISA-2025-27486VVD-CISA-2025-26635VVD-CISA-2025-27487CVE-2025-27481VVD-CISA-2025-27483GHSA-7qv7-c4h7-rw9mBDU:2025-04049CVE-2025-29810EUVD-2025-10148EUVD-2025-10238GHSA-25m2-7f7f-p53mBDU:2025-04180VVD-CISA-2025-26647GHSA-7fqc-4xq7-ghg5GHSA-v269-fhhx-vf6jBDU:2025-04057BDU:2025-04254BDU:2025-04103EUVD-2025-10121CVE-2025-27731BDU:2025-04062VVD-CISA-2025-27481EUVD-2025-10119GHSA-473g-6pv5-56gcEUVD-2025-10138VVD-CISA-2025-27744BDU:2025-04229CVE-2025-27467CVE-2025-27482EUVD-2025-10145CVE-2025-21203EUVD-2025-10176GHSA-9c5m-4mvh-2p3vVVD-CISA-2025-29820CVE-2025-26669GHSA-gjc7-752x-rr86CVE-2025-24060BDU:2025-04234EUVD-2025-10123BDU:2025-04046MSRC_CVE-2025-21222CNVD-2025-10610VVD-CISA-2025-29822BDU:2025-04238VVD-CISA-2025-27490BDU:2025-04230VVD-CISA-2025-29816BDU:2025-04981GHSA-j233-wqrg-q9v9BDU:2025-04047CVE-2025-26651

References

advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory

Browse GCVE Records

100 records in the GCVE database · Updated April 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›