Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2025-53766 (GCVE-0-2025-53766)
Vulnerability from cvelistv5 – Published: 2025-08-12 17:10 – Updated: 2025-11-10 00:12
VLAI?
EPSS
Summary
Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.
Severity ?
9.8 (Critical)
CWE
- CWE-122 - Heap-based Buffer Overflow
Assigner
References
| URL | Tags | ||||
|---|---|---|---|---|---|
|
|||||
Impacted products
| Vendor | Product | Version | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Microsoft | Windows 10 Version 1809 |
Affected:
10.0.17763.0 , < 10.0.17763.7678
(custom)
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-53766",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-08-12T19:59:07.832886Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-08-12T19:59:20.444Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"platforms": [
"32-bit Systems",
"x64-based Systems"
],
"product": "Windows 10 Version 1809",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "10.0.17763.7678",
"status": "affected",
"version": "10.0.17763.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Windows Server 2019",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "10.0.17763.7678",
"status": "affected",
"version": "10.0.17763.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Windows Server 2019 (Server Core installation)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "10.0.17763.7678",
"status": "affected",
"version": "10.0.17763.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Windows Server 2022",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "10.0.20348.4052",
"status": "affected",
"version": "10.0.20348.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"32-bit Systems",
"ARM64-based Systems",
"x64-based Systems"
],
"product": "Windows 10 Version 21H2",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "10.0.19044.6216",
"status": "affected",
"version": "10.0.19044.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"ARM64-based Systems",
"x64-based Systems"
],
"product": "Windows 11 version 22H2",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "10.0.22621.5768",
"status": "affected",
"version": "10.0.22621.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems",
"ARM64-based Systems",
"32-bit Systems"
],
"product": "Windows 10 Version 22H2",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "10.0.19045.6216",
"status": "affected",
"version": "10.0.19045.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Windows Server 2025 (Server Core installation)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "10.0.26100.4946",
"status": "affected",
"version": "10.0.26100.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"ARM64-based Systems"
],
"product": "Windows 11 version 22H3",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "10.0.22631.5768",
"status": "affected",
"version": "10.0.22631.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Windows 11 Version 23H2",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "10.0.22631.5768",
"status": "affected",
"version": "10.0.22631.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Windows Server 2022, 23H2 Edition (Server Core installation)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "10.0.25398.1791",
"status": "affected",
"version": "10.0.25398.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"ARM64-based Systems",
"x64-based Systems"
],
"product": "Windows 11 Version 24H2",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "10.0.26100.4946",
"status": "affected",
"version": "10.0.26100.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Windows Server 2025",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "10.0.26100.4946",
"status": "affected",
"version": "10.0.26100.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"32-bit Systems",
"x64-based Systems"
],
"product": "Windows 10 Version 1507",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "10.0.10240.21100",
"status": "affected",
"version": "10.0.10240.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"32-bit Systems",
"x64-based Systems"
],
"product": "Windows 10 Version 1607",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "10.0.14393.8330",
"status": "affected",
"version": "10.0.14393.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Windows Server 2016",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "10.0.14393.8330",
"status": "affected",
"version": "10.0.14393.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Windows Server 2016 (Server Core installation)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "10.0.14393.8330",
"status": "affected",
"version": "10.0.14393.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"32-bit Systems",
"x64-based Systems"
],
"product": "Windows Server 2008 Service Pack 2",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "6.0.6003.23471",
"status": "affected",
"version": "6.0.6003.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"32-bit Systems",
"x64-based Systems"
],
"product": "Windows Server 2008 Service Pack 2 (Server Core installation)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "6.0.6003.23471",
"status": "affected",
"version": "6.0.6003.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Windows Server 2008 R2 Service Pack 1",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "6.1.7601.27872",
"status": "affected",
"version": "6.1.7601.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Windows Server 2008 R2 Service Pack 1 (Server Core installation)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "6.1.7601.27872",
"status": "affected",
"version": "6.1.7601.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Windows Server 2012",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "6.2.9200.25622",
"status": "affected",
"version": "6.2.9200.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Windows Server 2012 (Server Core installation)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "6.2.9200.25622",
"status": "affected",
"version": "6.2.9200.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Windows Server 2012 R2",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "6.3.9600.22725",
"status": "affected",
"version": "6.3.9600.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Windows Server 2012 R2 (Server Core installation)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "6.3.9600.22725",
"status": "affected",
"version": "6.3.9600.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"Unknown"
],
"product": "Microsoft Office for Android",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.19127.20000",
"status": "affected",
"version": "16.0.1",
"versionType": "custom"
}
]
},
{
"platforms": [
"Unknown"
],
"product": "Microsoft Office for Universal",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.14326.22618",
"status": "affected",
"version": "16.0.1",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
"versionEndExcluding": "10.0.17763.7678",
"versionStartIncluding": "10.0.17763.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.17763.7678",
"versionStartIncluding": "10.0.17763.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.17763.7678",
"versionStartIncluding": "10.0.17763.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.20348.4052",
"versionStartIncluding": "10.0.20348.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*",
"versionEndExcluding": "10.0.19044.6216",
"versionStartIncluding": "10.0.19044.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_22H2:*:*:*:*:*:*:arm64:*",
"versionEndExcluding": "10.0.22621.5768",
"versionStartIncluding": "10.0.22621.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "10.0.19045.6216",
"versionStartIncluding": "10.0.19045.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.26100.4946",
"versionStartIncluding": "10.0.26100.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*",
"versionEndExcluding": "10.0.22631.5768",
"versionStartIncluding": "10.0.22631.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "10.0.22631.5768",
"versionStartIncluding": "10.0.22631.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_23h2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.25398.1791",
"versionStartIncluding": "10.0.25398.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*",
"versionEndExcluding": "10.0.26100.4946",
"versionStartIncluding": "10.0.26100.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.26100.4946",
"versionStartIncluding": "10.0.26100.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*",
"versionEndExcluding": "10.0.10240.21100",
"versionStartIncluding": "10.0.10240.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
"versionEndExcluding": "10.0.14393.8330",
"versionStartIncluding": "10.0.14393.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.14393.8330",
"versionStartIncluding": "10.0.14393.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.14393.8330",
"versionStartIncluding": "10.0.14393.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "6.0.6003.23471",
"versionStartIncluding": "6.0.6003.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "6.0.6003.23471",
"versionStartIncluding": "6.0.6003.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "6.1.7601.27872",
"versionStartIncluding": "6.1.7601.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "6.1.7601.27872",
"versionStartIncluding": "6.1.7601.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "6.2.9200.25622",
"versionStartIncluding": "6.2.9200.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "6.2.9200.25622",
"versionStartIncluding": "6.2.9200.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "6.3.9600.22725",
"versionStartIncluding": "6.3.9600.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "6.3.9600.22725",
"versionStartIncluding": "6.3.9600.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:office:*:*:android:*:*:*:*:*",
"versionEndExcluding": "16.0.19127.20000",
"versionStartIncluding": "16.0.1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:office:*:*:universal:*:*:*:*:*",
"versionEndExcluding": "16.0.14326.22618",
"versionStartIncluding": "16.0.1",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"datePublic": "2025-08-12T07:00:00.000Z",
"descriptions": [
{
"lang": "en-US",
"value": "Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-122",
"description": "CWE-122: Heap-based Buffer Overflow",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-11-10T00:12:42.266Z",
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"shortName": "microsoft"
},
"references": [
{
"name": "GDI+ Remote Code Execution Vulnerability",
"tags": [
"vendor-advisory"
],
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53766"
}
],
"title": "GDI+ Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"assignerShortName": "microsoft",
"cveId": "CVE-2025-53766",
"datePublished": "2025-08-12T17:10:37.678Z",
"dateReserved": "2025-07-09T13:25:25.500Z",
"dateUpdated": "2025-11-10T00:12:42.266Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2025-53766\",\"sourceIdentifier\":\"secure@microsoft.com\",\"published\":\"2025-08-12T18:15:45.400\",\"lastModified\":\"2025-08-14T17:11:06.503\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.\"},{\"lang\":\"es\",\"value\":\"El desbordamiento del b\u00fafer basado en mont\u00f3n en Windows GDI+ permite que un atacante no autorizado ejecute c\u00f3digo a trav\u00e9s de una red.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"secure@microsoft.com\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"secure@microsoft.com\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-122\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:office:*:*:*:*:*:universal:*:*\",\"versionEndExcluding\":\"16.0.14326.22618\",\"matchCriteriaId\":\"61108CED-2EB0-4CA4-BA2C-4C8526F1C95B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:office:*:*:*:*:*:android:*:*\",\"versionEndExcluding\":\"16.0.19127.20000\",\"matchCriteriaId\":\"65CE678D-5797-401B-991D-928994D1412F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*\",\"versionEndExcluding\":\"10.0.10240.21100\",\"matchCriteriaId\":\"29F441C0-F0F8-463F-B141-6A33EBA06B1D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*\",\"versionEndExcluding\":\"10.0.10240.21100\",\"matchCriteriaId\":\"5C7C5886-496D-4CBA-956A-A097AC7535D4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*\",\"versionEndExcluding\":\"10.0.14393.8330\",\"matchCriteriaId\":\"4E2D87DA-8EFF-4BB0-B025-A13C3F523BD1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*\",\"versionEndExcluding\":\"10.0.14393.8330\",\"matchCriteriaId\":\"C28DF998-E700-4675-9737-40A53288F54C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*\",\"versionEndExcluding\":\"10.0.17763.7678\",\"matchCriteriaId\":\"3A513AB8-ED03-4BCF-8077-09A117254263\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*\",\"versionEndExcluding\":\"10.0.17763.7678\",\"matchCriteriaId\":\"47A8837D-AB4B-465B-8D1C-B89B4EDDBDD4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.0.19044.6216\",\"matchCriteriaId\":\"77A19D12-C137-4E01-AF99-E1E7BBC9F0C3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.0.19045.6216\",\"matchCriteriaId\":\"44D27317-F93F-418E-8EC6-9BD1256677C9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.0.22621.5768\",\"matchCriteriaId\":\"B07546D0-ED2A-4B93-83E7-EA808DC39724\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.0.22631.5768\",\"matchCriteriaId\":\"49E4DFC9-7EB4-4577-83C0-D1E94C2A8D97\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.0.26100.4851\",\"matchCriteriaId\":\"6376F067-CC36-4A7B-914B-0A60EFF1AC48\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*\",\"matchCriteriaId\":\"2127D10C-B6F3-4C1D-B9AA-5D78513CC996\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*\",\"matchCriteriaId\":\"AB425562-C0A0-452E-AABE-F70522F15E1A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*\",\"matchCriteriaId\":\"AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A7DF96F8-BA6A-4780-9CA3-F719B3F81074\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DB18C4CE-5917-401E-ACF7-2747084FD36E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.0.14393.8330\",\"matchCriteriaId\":\"CD31CC61-6C1C-4232-87D7-E5B4FEBB1276\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.0.17763.7678\",\"matchCriteriaId\":\"D224ABEA-CCE3-4D7D-86B5-5BEDBF83303B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.0.20348.3989\",\"matchCriteriaId\":\"F752199D-6C01-4D8E-BD6C-3031E5CAED20\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.0.25398.1791\",\"matchCriteriaId\":\"94E45649-92F4-4D4C-9D94-275506530222\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.0.26100.4851\",\"matchCriteriaId\":\"B75BE97E-C12D-4DFB-B5F2-B8BF90C3E64E\"}]}]}],\"references\":[{\"url\":\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53766\",\"source\":\"secure@microsoft.com\",\"tags\":[\"Vendor Advisory\"]}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2025-53766\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-08-12T19:59:07.832886Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-08-12T19:59:13.535Z\"}}], \"cna\": {\"title\": \"GDI+ Remote Code Execution Vulnerability\", \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"version\": \"3.1\", \"baseScore\": 9.8, \"baseSeverity\": \"CRITICAL\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C\"}, \"scenarios\": [{\"lang\": \"en-US\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"Microsoft\", \"product\": \"Windows 10 Version 1809\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.17763.0\", \"lessThan\": \"10.0.17763.7678\", \"versionType\": \"custom\"}], \"platforms\": [\"32-bit Systems\", \"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2019\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.17763.0\", \"lessThan\": \"10.0.17763.7678\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2019 (Server Core installation)\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.17763.0\", \"lessThan\": \"10.0.17763.7678\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2022\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.20348.0\", \"lessThan\": \"10.0.20348.4052\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows 10 Version 21H2\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.19044.0\", \"lessThan\": \"10.0.19044.6216\", \"versionType\": \"custom\"}], \"platforms\": [\"32-bit Systems\", \"ARM64-based Systems\", \"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows 11 version 22H2\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.22621.0\", \"lessThan\": \"10.0.22621.5768\", \"versionType\": \"custom\"}], \"platforms\": [\"ARM64-based Systems\", \"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows 10 Version 22H2\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.19045.0\", \"lessThan\": \"10.0.19045.6216\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\", \"ARM64-based Systems\", \"32-bit Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2025 (Server Core installation)\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.26100.0\", \"lessThan\": \"10.0.26100.4946\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows 11 version 22H3\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.22631.0\", \"lessThan\": \"10.0.22631.5768\", \"versionType\": \"custom\"}], \"platforms\": [\"ARM64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows 11 Version 23H2\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.22631.0\", \"lessThan\": \"10.0.22631.5768\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2022, 23H2 Edition (Server Core installation)\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.25398.0\", \"lessThan\": \"10.0.25398.1791\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows 11 Version 24H2\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.26100.0\", \"lessThan\": \"10.0.26100.4946\", \"versionType\": \"custom\"}], \"platforms\": [\"ARM64-based Systems\", \"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2025\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.26100.0\", \"lessThan\": \"10.0.26100.4946\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows 10 Version 1507\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.10240.0\", \"lessThan\": \"10.0.10240.21100\", \"versionType\": \"custom\"}], \"platforms\": [\"32-bit Systems\", \"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows 10 Version 1607\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.14393.0\", \"lessThan\": \"10.0.14393.8330\", \"versionType\": \"custom\"}], \"platforms\": [\"32-bit Systems\", \"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2016\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.14393.0\", \"lessThan\": \"10.0.14393.8330\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2016 (Server Core installation)\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.14393.0\", \"lessThan\": \"10.0.14393.8330\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2008 Service Pack 2\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.0.6003.0\", \"lessThan\": \"6.0.6003.23471\", \"versionType\": \"custom\"}], \"platforms\": [\"32-bit Systems\", \"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2008 Service Pack 2 (Server Core installation)\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.0.6003.0\", \"lessThan\": \"6.0.6003.23471\", \"versionType\": \"custom\"}], \"platforms\": [\"32-bit Systems\", \"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2008 R2 Service Pack 1\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.1.7601.0\", \"lessThan\": \"6.1.7601.27872\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2008 R2 Service Pack 1 (Server Core installation)\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.1.7601.0\", \"lessThan\": \"6.1.7601.27872\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2012\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.2.9200.0\", \"lessThan\": \"6.2.9200.25622\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2012 (Server Core installation)\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.2.9200.0\", \"lessThan\": \"6.2.9200.25622\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2012 R2\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.3.9600.0\", \"lessThan\": \"6.3.9600.22725\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2012 R2 (Server Core installation)\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.3.9600.0\", \"lessThan\": \"6.3.9600.22725\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Microsoft Office for Android\", \"versions\": [{\"status\": \"affected\", \"version\": \"16.0.1\", \"lessThan\": \"16.0.19127.20000\", \"versionType\": \"custom\"}], \"platforms\": [\"Unknown\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Microsoft Office for Universal\", \"versions\": [{\"status\": \"affected\", \"version\": \"16.0.1\", \"lessThan\": \"16.0.14326.22618\", \"versionType\": \"custom\"}], \"platforms\": [\"Unknown\"]}], \"datePublic\": \"2025-08-12T07:00:00.000Z\", \"references\": [{\"url\": \"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53766\", \"name\": \"GDI+ Remote Code Execution Vulnerability\", \"tags\": [\"vendor-advisory\"]}], \"descriptions\": [{\"lang\": \"en-US\", \"value\": \"Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en-US\", \"type\": \"CWE\", \"cweId\": \"CWE-122\", \"description\": \"CWE-122: Heap-based Buffer Overflow\"}]}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.17763.7678\", \"versionStartIncluding\": \"10.0.17763.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.17763.7678\", \"versionStartIncluding\": \"10.0.17763.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.17763.7678\", \"versionStartIncluding\": \"10.0.17763.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.20348.4052\", \"versionStartIncluding\": \"10.0.20348.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.19044.6216\", \"versionStartIncluding\": \"10.0.19044.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_11_22H2:*:*:*:*:*:*:arm64:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.22621.5768\", \"versionStartIncluding\": \"10.0.22621.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.19045.6216\", \"versionStartIncluding\": \"10.0.19045.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.26100.4946\", \"versionStartIncluding\": \"10.0.26100.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.22631.5768\", \"versionStartIncluding\": \"10.0.22631.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.22631.5768\", \"versionStartIncluding\": \"10.0.22631.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_23h2:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.25398.1791\", \"versionStartIncluding\": \"10.0.25398.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.26100.4946\", \"versionStartIncluding\": \"10.0.26100.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.26100.4946\", \"versionStartIncluding\": \"10.0.26100.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.10240.21100\", \"versionStartIncluding\": \"10.0.10240.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.14393.8330\", \"versionStartIncluding\": \"10.0.14393.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.14393.8330\", \"versionStartIncluding\": \"10.0.14393.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.14393.8330\", \"versionStartIncluding\": \"10.0.14393.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.0.6003.23471\", \"versionStartIncluding\": \"6.0.6003.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.0.6003.23471\", \"versionStartIncluding\": \"6.0.6003.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1.7601.27872\", \"versionStartIncluding\": \"6.1.7601.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1.7601.27872\", \"versionStartIncluding\": \"6.1.7601.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.2.9200.25622\", \"versionStartIncluding\": \"6.2.9200.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.2.9200.25622\", \"versionStartIncluding\": \"6.2.9200.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.3.9600.22725\", \"versionStartIncluding\": \"6.3.9600.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.3.9600.22725\", \"versionStartIncluding\": \"6.3.9600.0\"}, {\"criteria\": \"cpe:2.3:a:microsoft:office:*:*:android:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"16.0.19127.20000\", \"versionStartIncluding\": \"16.0.1\"}, {\"criteria\": \"cpe:2.3:a:microsoft:office:*:*:universal:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"16.0.14326.22618\", \"versionStartIncluding\": \"16.0.1\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"shortName\": \"microsoft\", \"dateUpdated\": \"2025-10-30T18:43:55.820Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2025-53766\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-10-30T18:43:55.820Z\", \"dateReserved\": \"2025-07-09T13:25:25.500Z\", \"assignerOrgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"datePublished\": \"2025-08-12T17:10:37.678Z\", \"assignerShortName\": \"microsoft\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
MSRC_CVE-2025-53766
Vulnerability from csaf_microsoft - Published: 2025-08-12 07:00 - Updated: 2025-08-12 07:00Summary
GDI+ Remote Code Execution Vulnerability
Notes
Additional Resources
To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle
Disclaimer
The information provided in the Microsoft Knowledge Base is provided \"as is\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.
Customer Action
Required. The vulnerability documented by this CVE requires customer action to resolve.
{
"document": {
"acknowledgments": [
{
"names": [
"\u003ca href=\"https://x.com/gaborseljan\"\u003eG\u00e1bor Selj\u00e1n\u003c/a\u003e with \u003ca href=\"https://research.checkpoint.com/\"\u003eCheck Point Research\u003c/a\u003e"
]
}
],
"aggregate_severity": {
"namespace": "https://www.microsoft.com/en-us/msrc/security-update-severity-rating-system",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Public",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en-US",
"notes": [
{
"category": "general",
"text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
"title": "Additional Resources"
},
{
"category": "legal_disclaimer",
"text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
"title": "Disclaimer"
},
{
"category": "general",
"text": "Required. The vulnerability documented by this CVE requires customer action to resolve.",
"title": "Customer Action"
}
],
"publisher": {
"category": "vendor",
"contact_details": "secure@microsoft.com",
"name": "Microsoft Security Response Center",
"namespace": "https://msrc.microsoft.com"
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53766 GDI+ Remote Code Execution Vulnerability - HTML",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53766"
},
{
"category": "self",
"summary": "CVE-2025-53766 GDI+ Remote Code Execution Vulnerability - CSAF",
"url": "https://msrc.microsoft.com/csaf/advisories/2025/msrc_cve-2025-53766.json"
},
{
"category": "external",
"summary": "Microsoft Exploitability Index",
"url": "https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1"
},
{
"category": "external",
"summary": "Microsoft Support Lifecycle",
"url": "https://support.microsoft.com/lifecycle"
},
{
"category": "external",
"summary": "Common Vulnerability Scoring System",
"url": "https://www.first.org/cvss"
}
],
"title": "GDI+ Remote Code Execution Vulnerability",
"tracking": {
"current_release_date": "2025-08-12T07:00:00.000Z",
"generator": {
"date": "2025-09-17T17:51:59.139Z",
"engine": {
"name": "MSRC Generator",
"version": "1.0"
}
},
"id": "msrc_CVE-2025-53766",
"initial_release_date": "2025-08-12T07:00:00.000Z",
"revision_history": [
{
"date": "2025-08-12T07:00:00.000Z",
"legacy_version": "1",
"number": "1",
"summary": "Information published."
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.17763.7678",
"product": {
"name": "Windows 10 Version 1809 for 32-bit Systems \u003c10.0.17763.7678",
"product_id": "23"
}
},
{
"category": "product_version",
"name": "10.0.17763.7678",
"product": {
"name": "Windows 10 Version 1809 for 32-bit Systems 10.0.17763.7678",
"product_id": "11568"
}
}
],
"category": "product_name",
"name": "Windows 10 Version 1809 for 32-bit Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.17763.7678",
"product": {
"name": "Windows 10 Version 1809 for x64-based Systems \u003c10.0.17763.7678",
"product_id": "22"
}
},
{
"category": "product_version",
"name": "10.0.17763.7678",
"product": {
"name": "Windows 10 Version 1809 for x64-based Systems 10.0.17763.7678",
"product_id": "11569"
}
}
],
"category": "product_name",
"name": "Windows 10 Version 1809 for x64-based Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.17763.7678",
"product": {
"name": "Windows Server 2019 \u003c10.0.17763.7678",
"product_id": "21"
}
},
{
"category": "product_version",
"name": "10.0.17763.7678",
"product": {
"name": "Windows Server 2019 10.0.17763.7678",
"product_id": "11571"
}
}
],
"category": "product_name",
"name": "Windows Server 2019"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.17763.7678",
"product": {
"name": "Windows Server 2019 (Server Core installation) \u003c10.0.17763.7678",
"product_id": "20"
}
},
{
"category": "product_version",
"name": "10.0.17763.7678",
"product": {
"name": "Windows Server 2019 (Server Core installation) 10.0.17763.7678",
"product_id": "11572"
}
}
],
"category": "product_name",
"name": "Windows Server 2019 (Server Core installation)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.20348.4052",
"product": {
"name": "Windows Server 2022 \u003c10.0.20348.4052",
"product_id": "19"
}
},
{
"category": "product_version",
"name": "10.0.20348.4052",
"product": {
"name": "Windows Server 2022 10.0.20348.4052",
"product_id": "11923"
}
}
],
"category": "product_name",
"name": "Windows Server 2022"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.20348.4052",
"product": {
"name": "Windows Server 2022 (Server Core installation) \u003c10.0.20348.4052",
"product_id": "18"
}
},
{
"category": "product_version",
"name": "10.0.20348.4052",
"product": {
"name": "Windows Server 2022 (Server Core installation) 10.0.20348.4052",
"product_id": "11924"
}
}
],
"category": "product_name",
"name": "Windows Server 2022 (Server Core installation)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.19044.6216",
"product": {
"name": "Windows 10 Version 21H2 for 32-bit Systems \u003c10.0.19044.6216",
"product_id": "17"
}
},
{
"category": "product_version",
"name": "10.0.19044.6216",
"product": {
"name": "Windows 10 Version 21H2 for 32-bit Systems 10.0.19044.6216",
"product_id": "11929"
}
}
],
"category": "product_name",
"name": "Windows 10 Version 21H2 for 32-bit Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.19044.6216",
"product": {
"name": "Windows 10 Version 21H2 for ARM64-based Systems \u003c10.0.19044.6216",
"product_id": "16"
}
},
{
"category": "product_version",
"name": "10.0.19044.6216",
"product": {
"name": "Windows 10 Version 21H2 for ARM64-based Systems 10.0.19044.6216",
"product_id": "11930"
}
}
],
"category": "product_name",
"name": "Windows 10 Version 21H2 for ARM64-based Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.19044.6216",
"product": {
"name": "Windows 10 Version 21H2 for x64-based Systems \u003c10.0.19044.6216",
"product_id": "15"
}
},
{
"category": "product_version",
"name": "10.0.19044.6216",
"product": {
"name": "Windows 10 Version 21H2 for x64-based Systems 10.0.19044.6216",
"product_id": "11931"
}
}
],
"category": "product_name",
"name": "Windows 10 Version 21H2 for x64-based Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.22621.5768",
"product": {
"name": "Windows 11 Version 22H2 for ARM64-based Systems \u003c10.0.22621.5768",
"product_id": "14"
}
},
{
"category": "product_version",
"name": "10.0.22621.5768",
"product": {
"name": "Windows 11 Version 22H2 for ARM64-based Systems 10.0.22621.5768",
"product_id": "12085"
}
}
],
"category": "product_name",
"name": "Windows 11 Version 22H2 for ARM64-based Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.22621.5768",
"product": {
"name": "Windows 11 Version 22H2 for x64-based Systems \u003c10.0.22621.5768",
"product_id": "13"
}
},
{
"category": "product_version",
"name": "10.0.22621.5768",
"product": {
"name": "Windows 11 Version 22H2 for x64-based Systems 10.0.22621.5768",
"product_id": "12086"
}
}
],
"category": "product_name",
"name": "Windows 11 Version 22H2 for x64-based Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.19045.6216",
"product": {
"name": "Windows 10 Version 22H2 for x64-based Systems \u003c10.0.19045.6216",
"product_id": "12"
}
},
{
"category": "product_version",
"name": "10.0.19045.6216",
"product": {
"name": "Windows 10 Version 22H2 for x64-based Systems 10.0.19045.6216",
"product_id": "12097"
}
}
],
"category": "product_name",
"name": "Windows 10 Version 22H2 for x64-based Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.19045.6216",
"product": {
"name": "Windows 10 Version 22H2 for ARM64-based Systems \u003c10.0.19045.6216",
"product_id": "11"
}
},
{
"category": "product_version",
"name": "10.0.19045.6216",
"product": {
"name": "Windows 10 Version 22H2 for ARM64-based Systems 10.0.19045.6216",
"product_id": "12098"
}
}
],
"category": "product_name",
"name": "Windows 10 Version 22H2 for ARM64-based Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.19045.6216",
"product": {
"name": "Windows 10 Version 22H2 for 32-bit Systems \u003c10.0.19045.6216",
"product_id": "10"
}
},
{
"category": "product_version",
"name": "10.0.19045.6216",
"product": {
"name": "Windows 10 Version 22H2 for 32-bit Systems 10.0.19045.6216",
"product_id": "12099"
}
}
],
"category": "product_name",
"name": "Windows 10 Version 22H2 for 32-bit Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.26100.4946",
"product": {
"name": "Windows Server 2025 (Server Core installation) \u003c10.0.26100.4946",
"product_id": "1"
}
},
{
"category": "product_version",
"name": "10.0.26100.4946",
"product": {
"name": "Windows Server 2025 (Server Core installation) 10.0.26100.4946",
"product_id": "12437"
}
}
],
"category": "product_name",
"name": "Windows Server 2025 (Server Core installation)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.22631.5768",
"product": {
"name": "Windows 11 Version 23H2 for ARM64-based Systems \u003c10.0.22631.5768",
"product_id": "7"
}
},
{
"category": "product_version",
"name": "10.0.22631.5768",
"product": {
"name": "Windows 11 Version 23H2 for ARM64-based Systems 10.0.22631.5768",
"product_id": "12242"
}
}
],
"category": "product_name",
"name": "Windows 11 Version 23H2 for ARM64-based Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.22631.5768",
"product": {
"name": "Windows 11 Version 23H2 for x64-based Systems \u003c10.0.22631.5768",
"product_id": "6"
}
},
{
"category": "product_version",
"name": "10.0.22631.5768",
"product": {
"name": "Windows 11 Version 23H2 for x64-based Systems 10.0.22631.5768",
"product_id": "12243"
}
}
],
"category": "product_name",
"name": "Windows 11 Version 23H2 for x64-based Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.25398.1791",
"product": {
"name": "Windows Server 2022, 23H2 Edition (Server Core installation) \u003c10.0.25398.1791",
"product_id": "5"
}
},
{
"category": "product_version",
"name": "10.0.25398.1791",
"product": {
"name": "Windows Server 2022, 23H2 Edition (Server Core installation) 10.0.25398.1791",
"product_id": "12244"
}
}
],
"category": "product_name",
"name": "Windows Server 2022, 23H2 Edition (Server Core installation)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.26100.4946",
"product": {
"name": "Windows 11 Version 24H2 for ARM64-based Systems \u003c10.0.26100.4946",
"product_id": "4"
}
},
{
"category": "product_version",
"name": "10.0.26100.4946",
"product": {
"name": "Windows 11 Version 24H2 for ARM64-based Systems 10.0.26100.4946",
"product_id": "12389"
}
}
],
"category": "product_name",
"name": "Windows 11 Version 24H2 for ARM64-based Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.26100.4946",
"product": {
"name": "Windows 11 Version 24H2 for x64-based Systems \u003c10.0.26100.4946",
"product_id": "3"
}
},
{
"category": "product_version",
"name": "10.0.26100.4946",
"product": {
"name": "Windows 11 Version 24H2 for x64-based Systems 10.0.26100.4946",
"product_id": "12390"
}
}
],
"category": "product_name",
"name": "Windows 11 Version 24H2 for x64-based Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.26100.4946",
"product": {
"name": "Windows Server 2025 \u003c10.0.26100.4946",
"product_id": "2"
}
},
{
"category": "product_version",
"name": "10.0.26100.4946",
"product": {
"name": "Windows Server 2025 10.0.26100.4946",
"product_id": "12436"
}
}
],
"category": "product_name",
"name": "Windows Server 2025"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.10240.21100",
"product": {
"name": "Windows 10 for 32-bit Systems \u003c10.0.10240.21100",
"product_id": "29"
}
},
{
"category": "product_version",
"name": "10.0.10240.21100",
"product": {
"name": "Windows 10 for 32-bit Systems 10.0.10240.21100",
"product_id": "10729"
}
}
],
"category": "product_name",
"name": "Windows 10 for 32-bit Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.10240.21100",
"product": {
"name": "Windows 10 for x64-based Systems \u003c10.0.10240.21100",
"product_id": "28"
}
},
{
"category": "product_version",
"name": "10.0.10240.21100",
"product": {
"name": "Windows 10 for x64-based Systems 10.0.10240.21100",
"product_id": "10735"
}
}
],
"category": "product_name",
"name": "Windows 10 for x64-based Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.14393.8330",
"product": {
"name": "Windows 10 Version 1607 for 32-bit Systems \u003c10.0.14393.8330",
"product_id": "26"
}
},
{
"category": "product_version",
"name": "10.0.14393.8330",
"product": {
"name": "Windows 10 Version 1607 for 32-bit Systems 10.0.14393.8330",
"product_id": "10852"
}
}
],
"category": "product_name",
"name": "Windows 10 Version 1607 for 32-bit Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.14393.8330",
"product": {
"name": "Windows 10 Version 1607 for x64-based Systems \u003c10.0.14393.8330",
"product_id": "25"
}
},
{
"category": "product_version",
"name": "10.0.14393.8330",
"product": {
"name": "Windows 10 Version 1607 for x64-based Systems 10.0.14393.8330",
"product_id": "10853"
}
}
],
"category": "product_name",
"name": "Windows 10 Version 1607 for x64-based Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.14393.8330",
"product": {
"name": "Windows Server 2016 \u003c10.0.14393.8330",
"product_id": "27"
}
},
{
"category": "product_version",
"name": "10.0.14393.8330",
"product": {
"name": "Windows Server 2016 10.0.14393.8330",
"product_id": "10816"
}
}
],
"category": "product_name",
"name": "Windows Server 2016"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.14393.8330",
"product": {
"name": "Windows Server 2016 (Server Core installation) \u003c10.0.14393.8330",
"product_id": "24"
}
},
{
"category": "product_version",
"name": "10.0.14393.8330",
"product": {
"name": "Windows Server 2016 (Server Core installation) 10.0.14393.8330",
"product_id": "10855"
}
}
],
"category": "product_name",
"name": "Windows Server 2016 (Server Core installation)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c6.0.6003.23471",
"product": {
"name": "Windows Server 2008 for 32-bit Systems Service Pack 2 \u003c6.0.6003.23471",
"product_id": "39"
}
},
{
"category": "product_version",
"name": "6.0.6003.23471",
"product": {
"name": "Windows Server 2008 for 32-bit Systems Service Pack 2 6.0.6003.23471",
"product_id": "9312"
}
}
],
"category": "product_name",
"name": "Windows Server 2008 for 32-bit Systems Service Pack 2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c6.0.6003.23471",
"product": {
"name": "Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) \u003c6.0.6003.23471",
"product_id": "34"
}
},
{
"category": "product_version",
"name": "6.0.6003.23471",
"product": {
"name": "Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) 6.0.6003.23471",
"product_id": "10287"
}
}
],
"category": "product_name",
"name": "Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c6.0.6003.23471",
"product": {
"name": "Windows Server 2008 for x64-based Systems Service Pack 2 \u003c6.0.6003.23471",
"product_id": "38"
}
},
{
"category": "product_version",
"name": "6.0.6003.23471",
"product": {
"name": "Windows Server 2008 for x64-based Systems Service Pack 2 6.0.6003.23471",
"product_id": "9318"
}
}
],
"category": "product_name",
"name": "Windows Server 2008 for x64-based Systems Service Pack 2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c6.0.6003.23471",
"product": {
"name": "Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) \u003c6.0.6003.23471",
"product_id": "37"
}
},
{
"category": "product_version",
"name": "6.0.6003.23471",
"product": {
"name": "Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) 6.0.6003.23471",
"product_id": "9344"
}
}
],
"category": "product_name",
"name": "Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c6.1.7601.27872",
"product": {
"name": "Windows Server 2008 R2 for x64-based Systems Service Pack 1 \u003c6.1.7601.27872",
"product_id": "35"
}
},
{
"category": "product_version",
"name": "6.1.7601.27872",
"product": {
"name": "Windows Server 2008 R2 for x64-based Systems Service Pack 1 6.1.7601.27872",
"product_id": "10051"
}
}
],
"category": "product_name",
"name": "Windows Server 2008 R2 for x64-based Systems Service Pack 1"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c6.1.7601.27872",
"product": {
"name": "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) \u003c6.1.7601.27872",
"product_id": "36"
}
},
{
"category": "product_version",
"name": "6.1.7601.27872",
"product": {
"name": "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) 6.1.7601.27872",
"product_id": "10049"
}
}
],
"category": "product_name",
"name": "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c6.2.9200.25622",
"product": {
"name": "Windows Server 2012 \u003c6.2.9200.25622",
"product_id": "33"
}
},
{
"category": "product_version",
"name": "6.2.9200.25622",
"product": {
"name": "Windows Server 2012 6.2.9200.25622",
"product_id": "10378"
}
}
],
"category": "product_name",
"name": "Windows Server 2012"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c6.2.9200.25622",
"product": {
"name": "Windows Server 2012 (Server Core installation) \u003c6.2.9200.25622",
"product_id": "32"
}
},
{
"category": "product_version",
"name": "6.2.9200.25622",
"product": {
"name": "Windows Server 2012 (Server Core installation) 6.2.9200.25622",
"product_id": "10379"
}
}
],
"category": "product_name",
"name": "Windows Server 2012 (Server Core installation)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c6.3.9600.22725",
"product": {
"name": "Windows Server 2012 R2 \u003c6.3.9600.22725",
"product_id": "31"
}
},
{
"category": "product_version",
"name": "6.3.9600.22725",
"product": {
"name": "Windows Server 2012 R2 6.3.9600.22725",
"product_id": "10483"
}
}
],
"category": "product_name",
"name": "Windows Server 2012 R2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c6.3.9600.22725",
"product": {
"name": "Windows Server 2012 R2 (Server Core installation) \u003c6.3.9600.22725",
"product_id": "30"
}
},
{
"category": "product_version",
"name": "6.3.9600.22725",
"product": {
"name": "Windows Server 2012 R2 (Server Core installation) 6.3.9600.22725",
"product_id": "10543"
}
}
],
"category": "product_name",
"name": "Windows Server 2012 R2 (Server Core installation)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c16.0.19127.20000",
"product": {
"name": "Microsoft Office for Android \u003c16.0.19127.20000",
"product_id": "9"
}
},
{
"category": "product_version",
"name": "16.0.19127.20000",
"product": {
"name": "Microsoft Office for Android 16.0.19127.20000",
"product_id": "12155"
}
}
],
"category": "product_name",
"name": "Microsoft Office for Android"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c16.0.14326.22618",
"product": {
"name": "Microsoft Office for Universal \u003c16.0.14326.22618",
"product_id": "8"
}
},
{
"category": "product_version",
"name": "16.0.14326.22618",
"product": {
"name": "Microsoft Office for Universal 16.0.14326.22618",
"product_id": "12156"
}
}
],
"category": "product_name",
"name": "Microsoft Office for Universal"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-53766",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "general",
"text": "Microsoft",
"title": "Assigning CNA"
},
{
"category": "faq",
"text": "An attacker doesn\u0027t require any privileges on the systems hosting the web services. Successful exploitation of this vulnerability could cause Remote Code Execution or Information Disclosure on web services that are parsing documents that contain a specially crafted metafile, without the involvement of a victim user.",
"title": "According to the CVSS metric, the privilege required is none (PR:N) and user interaction is none (UI:N). What does that mean for this vulnerability?"
},
{
"category": "faq",
"text": "An attacker could trigger this vulnerability by convincing a victim to download and open a document that contains a specially crafted metafile. In the worst-case scenario, an attacker could trigger this vulnerability on web services by uploading documents containing a specially crafted metafile (AV:N) without user interaction. When multiple attack vectors can be used, we assign a score based on the scenario with the higher risk.",
"title": "According to the CVSS metric, the attack vector is network (AV:N). How could an attacker exploit the vulnerability?"
},
{
"category": "faq",
"text": "No, the Preview Pane is not an attack vector.",
"title": "Is the Preview Pane an attack vector for this vulnerability?"
}
],
"product_status": {
"fixed": [
"9312",
"9318",
"9344",
"10049",
"10051",
"10287",
"10378",
"10379",
"10483",
"10543",
"10729",
"10735",
"10816",
"10852",
"10853",
"10855",
"11568",
"11569",
"11571",
"11572",
"11923",
"11924",
"11929",
"11930",
"11931",
"12085",
"12086",
"12097",
"12098",
"12099",
"12155",
"12156",
"12242",
"12243",
"12244",
"12389",
"12390",
"12436",
"12437"
],
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17",
"18",
"19",
"20",
"21",
"22",
"23",
"24",
"25",
"26",
"27",
"28",
"29",
"30",
"31",
"32",
"33",
"34",
"35",
"36",
"37",
"38",
"39"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53766 GDI+ Remote Code Execution Vulnerability - HTML",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53766"
},
{
"category": "self",
"summary": "CVE-2025-53766 GDI+ Remote Code Execution Vulnerability - CSAF",
"url": "https://msrc.microsoft.com/csaf/advisories/2025/msrc_cve-2025-53766.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"date": "2025-08-12T07:00:00.000Z",
"details": "10.0.17763.7678:Security Update:https://support.microsoft.com/help/5063877",
"product_ids": [
"23",
"22",
"21",
"20"
],
"url": "https://support.microsoft.com/help/5063877"
},
{
"category": "vendor_fix",
"date": "2025-08-12T07:00:00.000Z",
"details": "10.0.20348.4052:SecurityUpdate:https://support.microsoft.com/help/5063880",
"product_ids": [
"19",
"18"
],
"url": "https://support.microsoft.com/help/5063880"
},
{
"category": "vendor_fix",
"date": "2025-08-12T07:00:00.000Z",
"details": "10.0.20348.3989:SecurityHotpatchUpdate:https://support.microsoft.com/help/5063812",
"product_ids": [
"19",
"18"
],
"url": "https://support.microsoft.com/help/5063812"
},
{
"category": "vendor_fix",
"date": "2025-08-12T07:00:00.000Z",
"details": "10.0.19044.6216:SecurityUpdate:https://support.microsoft.com/help/5063709",
"product_ids": [
"17",
"16",
"15"
],
"url": "https://support.microsoft.com/help/5063709"
},
{
"category": "vendor_fix",
"date": "2025-08-12T07:00:00.000Z",
"details": "10.0.22621.5768:Security Update:https://support.microsoft.com/help/5063875",
"product_ids": [
"14",
"13"
],
"url": "https://support.microsoft.com/help/5063875"
},
{
"category": "vendor_fix",
"date": "2025-08-12T07:00:00.000Z",
"details": "10.0.19045.6216:SecurityUpdate:https://support.microsoft.com/help/5063709",
"product_ids": [
"12",
"11",
"10"
],
"url": "https://support.microsoft.com/help/5063709"
},
{
"category": "vendor_fix",
"date": "2025-08-12T07:00:00.000Z",
"details": "10.0.26100.4946:Security Update:https://support.microsoft.com/help/5063878",
"product_ids": [
"1",
"4",
"3",
"2"
],
"url": "https://support.microsoft.com/help/5063878"
},
{
"category": "vendor_fix",
"date": "2025-08-12T07:00:00.000Z",
"details": "10.0.26100.4851:SecurityHotpatchUpdate:https://support.microsoft.com/help/5064010",
"product_ids": [
"1",
"4",
"3",
"2"
],
"url": "https://support.microsoft.com/help/5064010"
},
{
"category": "vendor_fix",
"date": "2025-08-12T07:00:00.000Z",
"details": "10.0.22631.5768:Security Update:https://support.microsoft.com/help/5063875",
"product_ids": [
"7",
"6"
],
"url": "https://support.microsoft.com/help/5063875"
},
{
"category": "vendor_fix",
"date": "2025-08-12T07:00:00.000Z",
"details": "10.0.25398.1791:SecurityUpdate:https://support.microsoft.com/help/5063899",
"product_ids": [
"5"
],
"url": "https://support.microsoft.com/help/5063899"
},
{
"category": "vendor_fix",
"date": "2025-08-12T07:00:00.000Z",
"details": "10.0.10240.21100:SecurityUpdate:https://support.microsoft.com/help/5063889",
"product_ids": [
"29",
"28"
],
"url": "https://support.microsoft.com/help/5063889"
},
{
"category": "vendor_fix",
"date": "2025-08-12T07:00:00.000Z",
"details": "10.0.14393.8330:Security Update:https://support.microsoft.com/help/5063871",
"product_ids": [
"26",
"25",
"27",
"24"
],
"url": "https://support.microsoft.com/help/5063871"
},
{
"category": "vendor_fix",
"date": "2025-08-12T07:00:00.000Z",
"details": "6.0.6003.23471:MonthlyRollup:https://support.microsoft.com/help/5063888",
"product_ids": [
"39",
"34",
"38",
"37"
],
"url": "https://support.microsoft.com/help/5063888"
},
{
"category": "vendor_fix",
"date": "2025-08-12T07:00:00.000Z",
"details": "6.0.6003.23471:SecurityOnly:https://support.microsoft.com/help/5063948",
"product_ids": [
"39",
"34",
"38",
"37"
],
"url": "https://support.microsoft.com/help/5063948"
},
{
"category": "vendor_fix",
"date": "2025-08-12T07:00:00.000Z",
"details": "6.1.7601.27872:MonthlyRollup:https://support.microsoft.com/help/5063947",
"product_ids": [
"35",
"36"
],
"url": "https://support.microsoft.com/help/5063947"
},
{
"category": "vendor_fix",
"date": "2025-08-12T07:00:00.000Z",
"details": "6.1.7601.27872:SecurityOnly:https://support.microsoft.com/help/5063927",
"product_ids": [
"35",
"36"
],
"url": "https://support.microsoft.com/help/5063927"
},
{
"category": "vendor_fix",
"date": "2025-08-12T07:00:00.000Z",
"details": "6.2.9200.25622:MonthlyRollup:https://support.microsoft.com/help/5063906",
"product_ids": [
"33",
"32"
],
"url": "https://support.microsoft.com/help/5063906"
},
{
"category": "vendor_fix",
"date": "2025-08-12T07:00:00.000Z",
"details": "6.3.9600.22725:MonthlyRollup:https://support.microsoft.com/help/5063950",
"product_ids": [
"31",
"30"
],
"url": "https://support.microsoft.com/help/5063950"
},
{
"category": "vendor_fix",
"date": "2025-08-12T07:00:00.000Z",
"details": "16.0.19127.20000:Security Update:https://support.google.com/googleplay/answer/113412?hl=en",
"product_ids": [
"9"
],
"url": "https://support.google.com/googleplay/answer/113412?hl=en"
},
{
"category": "vendor_fix",
"date": "2025-08-12T07:00:00.000Z",
"details": "16.0.14326.22618:Security Update:https://support.microsoft.com/en-us/account-billing/get-updates-for-apps-and-games-in-microsoft-store-a1fe19c0-532d-ec47-7035-d1c5a1dd464f",
"product_ids": [
"8"
],
"url": "https://support.microsoft.com/en-us/account-billing/get-updates-for-apps-and-games-in-microsoft-store-a1fe19c0-532d-ec47-7035-d1c5a1dd464f"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"environmentalsScore": 0.0,
"exploitCodeMaturity": "UNPROVEN",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"remediationLevel": "OFFICIAL_FIX",
"reportConfidence": "CONFIRMED",
"scope": "UNCHANGED",
"temporalScore": 8.5,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17",
"18",
"19",
"20",
"21",
"22",
"23",
"24",
"25",
"26",
"27",
"28",
"29",
"30",
"31",
"32",
"33",
"34",
"35",
"36",
"37",
"38",
"39"
]
}
],
"threats": [
{
"category": "impact",
"details": "Remote Code Execution"
},
{
"category": "exploit_status",
"details": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"
}
],
"title": "GDI+ Remote Code Execution Vulnerability"
}
]
}
FKIE_CVE-2025-53766
Vulnerability from fkie_nvd - Published: 2025-08-12 18:15 - Updated: 2025-08-14 17:11
Severity ?
Summary
Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.
References
| URL | Tags | ||
|---|---|---|---|
| secure@microsoft.com | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53766 | Vendor Advisory |
Impacted products
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:office:*:*:*:*:*:universal:*:*",
"matchCriteriaId": "61108CED-2EB0-4CA4-BA2C-4C8526F1C95B",
"versionEndExcluding": "16.0.14326.22618",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:office:*:*:*:*:*:android:*:*",
"matchCriteriaId": "65CE678D-5797-401B-991D-928994D1412F",
"versionEndExcluding": "16.0.19127.20000",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*",
"matchCriteriaId": "29F441C0-F0F8-463F-B141-6A33EBA06B1D",
"versionEndExcluding": "10.0.10240.21100",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*",
"matchCriteriaId": "5C7C5886-496D-4CBA-956A-A097AC7535D4",
"versionEndExcluding": "10.0.10240.21100",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
"matchCriteriaId": "4E2D87DA-8EFF-4BB0-B025-A13C3F523BD1",
"versionEndExcluding": "10.0.14393.8330",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
"matchCriteriaId": "C28DF998-E700-4675-9737-40A53288F54C",
"versionEndExcluding": "10.0.14393.8330",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
"matchCriteriaId": "3A513AB8-ED03-4BCF-8077-09A117254263",
"versionEndExcluding": "10.0.17763.7678",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
"matchCriteriaId": "47A8837D-AB4B-465B-8D1C-B89B4EDDBDD4",
"versionEndExcluding": "10.0.17763.7678",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
"matchCriteriaId": "77A19D12-C137-4E01-AF99-E1E7BBC9F0C3",
"versionEndExcluding": "10.0.19044.6216",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
"matchCriteriaId": "44D27317-F93F-418E-8EC6-9BD1256677C9",
"versionEndExcluding": "10.0.19045.6216",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
"matchCriteriaId": "B07546D0-ED2A-4B93-83E7-EA808DC39724",
"versionEndExcluding": "10.0.22621.5768",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
"matchCriteriaId": "49E4DFC9-7EB4-4577-83C0-D1E94C2A8D97",
"versionEndExcluding": "10.0.22631.5768",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
"matchCriteriaId": "6376F067-CC36-4A7B-914B-0A60EFF1AC48",
"versionEndExcluding": "10.0.26100.4851",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
"matchCriteriaId": "2127D10C-B6F3-4C1D-B9AA-5D78513CC996",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
"matchCriteriaId": "AB425562-C0A0-452E-AABE-F70522F15E1A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
"matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
"matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
"matchCriteriaId": "CD31CC61-6C1C-4232-87D7-E5B4FEBB1276",
"versionEndExcluding": "10.0.14393.8330",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
"matchCriteriaId": "D224ABEA-CCE3-4D7D-86B5-5BEDBF83303B",
"versionEndExcluding": "10.0.17763.7678",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
"matchCriteriaId": "F752199D-6C01-4D8E-BD6C-3031E5CAED20",
"versionEndExcluding": "10.0.20348.3989",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
"matchCriteriaId": "94E45649-92F4-4D4C-9D94-275506530222",
"versionEndExcluding": "10.0.25398.1791",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
"matchCriteriaId": "B75BE97E-C12D-4DFB-B5F2-B8BF90C3E64E",
"versionEndExcluding": "10.0.26100.4851",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network."
},
{
"lang": "es",
"value": "El desbordamiento del b\u00fafer basado en mont\u00f3n en Windows GDI+ permite que un atacante no autorizado ejecute c\u00f3digo a trav\u00e9s de una red."
}
],
"id": "CVE-2025-53766",
"lastModified": "2025-08-14T17:11:06.503",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9,
"source": "secure@microsoft.com",
"type": "Secondary"
}
]
},
"published": "2025-08-12T18:15:45.400",
"references": [
{
"source": "secure@microsoft.com",
"tags": [
"Vendor Advisory"
],
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53766"
}
],
"sourceIdentifier": "secure@microsoft.com",
"vulnStatus": "Analyzed",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-122"
}
],
"source": "secure@microsoft.com",
"type": "Secondary"
}
]
}
NCSC-2025-0250
Vulnerability from csaf_ncscnl - Published: 2025-08-13 07:23 - Updated: 2025-08-13 07:23Summary
Kwetsbaarheden verholpen in Microsoft Office
Notes
The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:
NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.
NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.
This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.
Feiten
Microsoft heeft kwetsbaarheden verholpen in Microsoft Office (inclusief SharePoint, Visio, Word, Excel en PowerPoint).
Interpretaties
De kwetsbaarheden in Microsoft Office omvatten verschillende 'use after free'-fouten, heap-gebaseerde bufferoverflows en andere kwetsbaarheden die ongeautoriseerde aanvallers in staat stellen om willekeurige code uit te voeren op lokale machines. Deze kwetsbaarheden kunnen worden geëxploiteerd via speciaal vervaardigde documenten of door misbruik van onbetrouwbare gegevens, wat kan leiden tot ongeautoriseerde toegang en controle over systemen.
```
Microsoft Teams:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-53783 | 7.50 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|
Microsoft Office PowerPoint:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-53761 | 7.80 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|
Windows GDI+:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-53766 | 9.80 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|
Microsoft Office Word:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-53733 | 8.40 | Uitvoeren van willekeurige code |
| CVE-2025-53736 | 6.80 | Toegang tot gevoelige gegevens |
| CVE-2025-53738 | 7.80 | Uitvoeren van willekeurige code |
| CVE-2025-53784 | 8.40 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|
Microsoft Office Visio:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-53730 | 7.80 | Uitvoeren van willekeurige code |
| CVE-2025-53734 | 7.80 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|
Microsoft Office:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-53731 | 8.40 | Uitvoeren van willekeurige code |
| CVE-2025-53732 | 7.80 | Uitvoeren van willekeurige code |
| CVE-2025-53740 | 8.40 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|
Microsoft Office SharePoint:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-53760 | 7.10 | Verkrijgen van verhoogde rechten |
| CVE-2025-49712 | 8.80 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|
Microsoft Office Excel:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-53741 | 7.80 | Uitvoeren van willekeurige code |
| CVE-2025-53759 | 7.80 | Uitvoeren van willekeurige code |
| CVE-2025-53735 | 7.80 | Uitvoeren van willekeurige code |
| CVE-2025-53737 | 7.80 | Uitvoeren van willekeurige code |
| CVE-2025-53739 | 7.80 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|
```
Oplossingen
Microsoft heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.
Kans
medium
Schade
medium
CWE-126
Buffer Over-read
CWE-908
Use of Uninitialized Resource
CWE-843
Access of Resource Using Incompatible Type ('Type Confusion')
CWE-416
Use After Free
CWE-502
Deserialization of Untrusted Data
CWE-918
Server-Side Request Forgery (SSRF)
CWE-122
Heap-based Buffer Overflow
CWE-681
Incorrect Conversion between Numeric Types
{
"document": {
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE"
}
},
"lang": "nl",
"notes": [
{
"category": "legal_disclaimer",
"text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
},
{
"category": "description",
"text": "Microsoft heeft kwetsbaarheden verholpen in Microsoft Office (inclusief SharePoint, Visio, Word, Excel en PowerPoint).",
"title": "Feiten"
},
{
"category": "description",
"text": "De kwetsbaarheden in Microsoft Office omvatten verschillende \u0027use after free\u0027-fouten, heap-gebaseerde bufferoverflows en andere kwetsbaarheden die ongeautoriseerde aanvallers in staat stellen om willekeurige code uit te voeren op lokale machines. Deze kwetsbaarheden kunnen worden ge\u00ebxploiteerd via speciaal vervaardigde documenten of door misbruik van onbetrouwbare gegevens, wat kan leiden tot ongeautoriseerde toegang en controle over systemen. \n```\nMicrosoft Teams: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2025-53783 | 7.50 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2025-53761 | 7.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2025-53766 | 9.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2025-53733 | 8.40 | Uitvoeren van willekeurige code | \n| CVE-2025-53736 | 6.80 | Toegang tot gevoelige gegevens | \n| CVE-2025-53738 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2025-53784 | 8.40 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Visio: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2025-53730 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2025-53734 | 7.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2025-53731 | 8.40 | Uitvoeren van willekeurige code | \n| CVE-2025-53732 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2025-53740 | 8.40 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2025-53760 | 7.10 | Verkrijgen van verhoogde rechten | \n| CVE-2025-49712 | 8.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2025-53741 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2025-53759 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2025-53735 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2025-53737 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2025-53739 | 7.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n```",
"title": "Interpretaties"
},
{
"category": "description",
"text": "Microsoft heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.",
"title": "Oplossingen"
},
{
"category": "general",
"text": "medium",
"title": "Kans"
},
{
"category": "general",
"text": "medium",
"title": "Schade"
},
{
"category": "general",
"text": "Buffer Over-read",
"title": "CWE-126"
},
{
"category": "general",
"text": "Use of Uninitialized Resource",
"title": "CWE-908"
},
{
"category": "general",
"text": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
"title": "CWE-843"
},
{
"category": "general",
"text": "Use After Free",
"title": "CWE-416"
},
{
"category": "general",
"text": "Deserialization of Untrusted Data",
"title": "CWE-502"
},
{
"category": "general",
"text": "Server-Side Request Forgery (SSRF)",
"title": "CWE-918"
},
{
"category": "general",
"text": "Heap-based Buffer Overflow",
"title": "CWE-122"
},
{
"category": "general",
"text": "Incorrect Conversion between Numeric Types",
"title": "CWE-681"
}
],
"publisher": {
"category": "coordinator",
"contact_details": "cert@ncsc.nl",
"name": "Nationaal Cyber Security Centrum",
"namespace": "https://www.ncsc.nl/"
},
"references": [
{
"category": "external",
"summary": "Reference",
"url": "https://msrc.microsoft.com/update-guide/en-us"
}
],
"title": "Kwetsbaarheden verholpen in Microsoft Office",
"tracking": {
"current_release_date": "2025-08-13T07:23:56.395786Z",
"generator": {
"date": "2025-08-04T16:30:00Z",
"engine": {
"name": "V.A.",
"version": "1.2"
}
},
"id": "NCSC-2025-0250",
"initial_release_date": "2025-08-13T07:23:56.395786Z",
"revision_history": [
{
"date": "2025-08-13T07:23:56.395786Z",
"number": "1.0.0",
"summary": "Initiele versie"
}
],
"status": "final",
"version": "1.0.0"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/enterprise on x86",
"product": {
"name": "vers:unknown/enterprise on x86",
"product_id": "CSAFPID-2906953"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/enterprise on x86 64",
"product": {
"name": "vers:unknown/enterprise on x86 64",
"product_id": "CSAFPID-2906952"
}
}
],
"category": "product_name",
"name": "365 Apps"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:microsoft/16.0.5513.1000 2016 on x86",
"product": {
"name": "vers:microsoft/16.0.5513.1000 2016 on x86",
"product_id": "CSAFPID-3049063"
}
},
{
"category": "product_version_range",
"name": "vers:microsoft/16.0.5513.1000 2016 on x86 64",
"product": {
"name": "vers:microsoft/16.0.5513.1000 2016 on x86 64",
"product_id": "CSAFPID-3049066"
}
},
{
"category": "product_version_range",
"name": "vers:microsoft/16.0.5513.1000 on x86",
"product": {
"name": "vers:microsoft/16.0.5513.1000 on x86",
"product_id": "CSAFPID-3049201"
}
},
{
"category": "product_version_range",
"name": "vers:microsoft/16.0.5513.1000 on x86 64",
"product": {
"name": "vers:microsoft/16.0.5513.1000 on x86 64",
"product_id": "CSAFPID-3049200"
}
}
],
"category": "product_name",
"name": "Excel"
}
],
"category": "product_family",
"name": "Microsoft"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/16.0.1|\u003chttps://aka.ms/officesecurityreleases",
"product": {
"name": "vers:unknown/16.0.1|\u003chttps://aka.ms/officesecurityreleases",
"product_id": "CSAFPID-1288319",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*"
}
}
}
],
"category": "product_name",
"name": "Microsoft 365 Apps for Enterprise"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:microsoft/unknown",
"product": {
"name": "vers:microsoft/unknown",
"product_id": "CSAFPID-1429573",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*"
}
}
}
],
"category": "product_name",
"name": "Microsoft 365 Apps for Enterprise for 32-bit Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:microsoft/unknown",
"product": {
"name": "vers:microsoft/unknown",
"product_id": "CSAFPID-1429574",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*"
}
}
}
],
"category": "product_name",
"name": "Microsoft 365 Apps for Enterprise for 64-bit Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:microsoft/unknown",
"product": {
"name": "vers:microsoft/unknown",
"product_id": "CSAFPID-1770557",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:excel_2016:*:*:*:*:*:*:x86:*"
}
}
}
],
"category": "product_name",
"name": "Microsoft Excel 2016 (32-bit edition)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:microsoft/unknown",
"product": {
"name": "vers:microsoft/unknown",
"product_id": "CSAFPID-1770558",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:excel_2016:*:*:*:*:*:*:x64:*"
}
}
}
],
"category": "product_name",
"name": "Microsoft Excel 2016 (64-bit edition)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:microsoft/unknown",
"product": {
"name": "vers:microsoft/unknown",
"product_id": "CSAFPID-1770553",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:office_2016:*:*:*:*:*:*:x86:*"
}
}
}
],
"category": "product_name",
"name": "Microsoft Office 2016 (32-bit edition)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:microsoft/unknown",
"product": {
"name": "vers:microsoft/unknown",
"product_id": "CSAFPID-1770554",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:office_2016:*:*:*:*:*:*:x64:*"
}
}
}
],
"category": "product_name",
"name": "Microsoft Office 2016 (64-bit edition)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:microsoft/unknown",
"product": {
"name": "vers:microsoft/unknown",
"product_id": "CSAFPID-1770547",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:office_2019:*:*:*:*:*:*:*:*"
}
}
}
],
"category": "product_name",
"name": "Microsoft Office 2019 for 32-bit editions"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:microsoft/unknown",
"product": {
"name": "vers:microsoft/unknown",
"product_id": "CSAFPID-1770548",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:office_2019:*:*:*:*:*:*:*:*"
}
}
}
],
"category": "product_name",
"name": "Microsoft Office 2019 for 64-bit editions"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:microsoft/unknown",
"product": {
"name": "vers:microsoft/unknown",
"product_id": "CSAFPID-1770550",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*"
}
}
}
],
"category": "product_name",
"name": "Microsoft Office LTSC 2021 for 32-bit editions"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:microsoft/unknown",
"product": {
"name": "vers:microsoft/unknown",
"product_id": "CSAFPID-1770549",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*"
}
}
}
],
"category": "product_name",
"name": "Microsoft Office LTSC 2021 for 64-bit editions"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:microsoft/unknown",
"product": {
"name": "vers:microsoft/unknown",
"product_id": "CSAFPID-1770551",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*"
}
}
}
],
"category": "product_name",
"name": "Microsoft Office LTSC 2024 for 32-bit editions"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:microsoft/unknown",
"product": {
"name": "vers:microsoft/unknown",
"product_id": "CSAFPID-1770552",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*"
}
}
}
],
"category": "product_name",
"name": "Microsoft Office LTSC 2024 for 64-bit editions"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:microsoft/unknown",
"product": {
"name": "vers:microsoft/unknown",
"product_id": "CSAFPID-1770555",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*"
}
}
}
],
"category": "product_name",
"name": "Microsoft Office LTSC for Mac 2021"
}
],
"category": "product_family",
"name": "Microsoft Office"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/16.0.0.0|\u003c16.0.5513.1000",
"product": {
"name": "vers:unknown/16.0.0.0|\u003c16.0.5513.1000",
"product_id": "CSAFPID-3048743"
}
}
],
"category": "product_name",
"name": "Microsoft Excel 2016"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/16.0.0|\u003c16.0.5513.1000",
"product": {
"name": "vers:unknown/16.0.0|\u003c16.0.5513.1000",
"product_id": "CSAFPID-3048744"
}
}
],
"category": "product_name",
"name": "Microsoft Office 2016"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/19.0.0|\u003chttps://aka.ms/officesecurityreleases",
"product": {
"name": "vers:unknown/19.0.0|\u003chttps://aka.ms/officesecurityreleases",
"product_id": "CSAFPID-1288368",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:*"
}
}
}
],
"category": "product_name",
"name": "Microsoft Office 2019"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/16.0.1|\u003chttps://aka.ms/officesecurityreleases",
"product": {
"name": "vers:unknown/16.0.1|\u003chttps://aka.ms/officesecurityreleases",
"product_id": "CSAFPID-1288369",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:*:*:*"
}
}
}
],
"category": "product_name",
"name": "Microsoft Office LTSC 2021"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/1.0.0|\u003chttps://aka.ms/officesecurityreleases",
"product": {
"name": "vers:unknown/1.0.0|\u003chttps://aka.ms/officesecurityreleases",
"product_id": "CSAFPID-1288320",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:*:*:*"
}
}
}
],
"category": "product_name",
"name": "Microsoft Office LTSC 2024"
}
],
"category": "vendor",
"name": "Microsoft"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-49712",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"notes": [
{
"category": "other",
"text": "Deserialization of Untrusted Data",
"title": "CWE-502"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2906953",
"CSAFPID-2906952",
"CSAFPID-3049063",
"CSAFPID-3049066",
"CSAFPID-3049201",
"CSAFPID-3049200",
"CSAFPID-1288319",
"CSAFPID-1429573",
"CSAFPID-1429574",
"CSAFPID-3048743",
"CSAFPID-1770557",
"CSAFPID-1770558",
"CSAFPID-3048744",
"CSAFPID-1770553",
"CSAFPID-1770554",
"CSAFPID-1288368",
"CSAFPID-1770547",
"CSAFPID-1770548",
"CSAFPID-1288369",
"CSAFPID-1770550",
"CSAFPID-1770549",
"CSAFPID-1288320",
"CSAFPID-1770551",
"CSAFPID-1770552",
"CSAFPID-1770555"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-49712 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-49712.json"
}
],
"title": "CVE-2025-49712"
},
{
"cve": "CVE-2025-53730",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2906953",
"CSAFPID-2906952",
"CSAFPID-3049063",
"CSAFPID-3049066",
"CSAFPID-3049201",
"CSAFPID-3049200",
"CSAFPID-1288319",
"CSAFPID-1429573",
"CSAFPID-1429574",
"CSAFPID-3048743",
"CSAFPID-1770557",
"CSAFPID-1770558",
"CSAFPID-3048744",
"CSAFPID-1770553",
"CSAFPID-1770554",
"CSAFPID-1288368",
"CSAFPID-1770547",
"CSAFPID-1770548",
"CSAFPID-1288369",
"CSAFPID-1770550",
"CSAFPID-1770549",
"CSAFPID-1288320",
"CSAFPID-1770551",
"CSAFPID-1770552",
"CSAFPID-1770555"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53730 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53730.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-2906953",
"CSAFPID-2906952",
"CSAFPID-3049063",
"CSAFPID-3049066",
"CSAFPID-3049201",
"CSAFPID-3049200",
"CSAFPID-1288319",
"CSAFPID-1429573",
"CSAFPID-1429574",
"CSAFPID-3048743",
"CSAFPID-1770557",
"CSAFPID-1770558",
"CSAFPID-3048744",
"CSAFPID-1770553",
"CSAFPID-1770554",
"CSAFPID-1288368",
"CSAFPID-1770547",
"CSAFPID-1770548",
"CSAFPID-1288369",
"CSAFPID-1770550",
"CSAFPID-1770549",
"CSAFPID-1288320",
"CSAFPID-1770551",
"CSAFPID-1770552",
"CSAFPID-1770555"
]
}
],
"title": "CVE-2025-53730"
},
{
"cve": "CVE-2025-53731",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2906953",
"CSAFPID-2906952",
"CSAFPID-3049063",
"CSAFPID-3049066",
"CSAFPID-3049201",
"CSAFPID-3049200",
"CSAFPID-1288319",
"CSAFPID-1429573",
"CSAFPID-1429574",
"CSAFPID-3048743",
"CSAFPID-1770557",
"CSAFPID-1770558",
"CSAFPID-3048744",
"CSAFPID-1770553",
"CSAFPID-1770554",
"CSAFPID-1288368",
"CSAFPID-1770547",
"CSAFPID-1770548",
"CSAFPID-1288369",
"CSAFPID-1770550",
"CSAFPID-1770549",
"CSAFPID-1288320",
"CSAFPID-1770551",
"CSAFPID-1770552",
"CSAFPID-1770555"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53731 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53731.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-2906953",
"CSAFPID-2906952",
"CSAFPID-3049063",
"CSAFPID-3049066",
"CSAFPID-3049201",
"CSAFPID-3049200",
"CSAFPID-1288319",
"CSAFPID-1429573",
"CSAFPID-1429574",
"CSAFPID-3048743",
"CSAFPID-1770557",
"CSAFPID-1770558",
"CSAFPID-3048744",
"CSAFPID-1770553",
"CSAFPID-1770554",
"CSAFPID-1288368",
"CSAFPID-1770547",
"CSAFPID-1770548",
"CSAFPID-1288369",
"CSAFPID-1770550",
"CSAFPID-1770549",
"CSAFPID-1288320",
"CSAFPID-1770551",
"CSAFPID-1770552",
"CSAFPID-1770555"
]
}
],
"title": "CVE-2025-53731"
},
{
"cve": "CVE-2025-53732",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "other",
"text": "Heap-based Buffer Overflow",
"title": "CWE-122"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2906953",
"CSAFPID-2906952",
"CSAFPID-3049063",
"CSAFPID-3049066",
"CSAFPID-3049201",
"CSAFPID-3049200",
"CSAFPID-1288319",
"CSAFPID-1429573",
"CSAFPID-1429574",
"CSAFPID-3048743",
"CSAFPID-1770557",
"CSAFPID-1770558",
"CSAFPID-3048744",
"CSAFPID-1770553",
"CSAFPID-1770554",
"CSAFPID-1288368",
"CSAFPID-1770547",
"CSAFPID-1770548",
"CSAFPID-1288369",
"CSAFPID-1770550",
"CSAFPID-1770549",
"CSAFPID-1288320",
"CSAFPID-1770551",
"CSAFPID-1770552",
"CSAFPID-1770555"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53732 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53732.json"
}
],
"title": "CVE-2025-53732"
},
{
"cve": "CVE-2025-53733",
"cwe": {
"id": "CWE-681",
"name": "Incorrect Conversion between Numeric Types"
},
"notes": [
{
"category": "other",
"text": "Incorrect Conversion between Numeric Types",
"title": "CWE-681"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2906953",
"CSAFPID-2906952",
"CSAFPID-3049063",
"CSAFPID-3049066",
"CSAFPID-3049201",
"CSAFPID-3049200",
"CSAFPID-1288319",
"CSAFPID-1429573",
"CSAFPID-1429574",
"CSAFPID-3048743",
"CSAFPID-1770557",
"CSAFPID-1770558",
"CSAFPID-3048744",
"CSAFPID-1770553",
"CSAFPID-1770554",
"CSAFPID-1288368",
"CSAFPID-1770547",
"CSAFPID-1770548",
"CSAFPID-1288369",
"CSAFPID-1770550",
"CSAFPID-1770549",
"CSAFPID-1288320",
"CSAFPID-1770551",
"CSAFPID-1770552",
"CSAFPID-1770555"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53733 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53733.json"
}
],
"title": "CVE-2025-53733"
},
{
"cve": "CVE-2025-53734",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2906953",
"CSAFPID-2906952",
"CSAFPID-3049063",
"CSAFPID-3049066",
"CSAFPID-3049201",
"CSAFPID-3049200",
"CSAFPID-1288319",
"CSAFPID-1429573",
"CSAFPID-1429574",
"CSAFPID-3048743",
"CSAFPID-1770557",
"CSAFPID-1770558",
"CSAFPID-3048744",
"CSAFPID-1770553",
"CSAFPID-1770554",
"CSAFPID-1288368",
"CSAFPID-1770547",
"CSAFPID-1770548",
"CSAFPID-1288369",
"CSAFPID-1770550",
"CSAFPID-1770549",
"CSAFPID-1288320",
"CSAFPID-1770551",
"CSAFPID-1770552",
"CSAFPID-1770555"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53734 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53734.json"
}
],
"title": "CVE-2025-53734"
},
{
"cve": "CVE-2025-53735",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2906953",
"CSAFPID-2906952",
"CSAFPID-3049063",
"CSAFPID-3049066",
"CSAFPID-3049201",
"CSAFPID-3049200",
"CSAFPID-1288319",
"CSAFPID-1429573",
"CSAFPID-1429574",
"CSAFPID-3048743",
"CSAFPID-1770557",
"CSAFPID-1770558",
"CSAFPID-3048744",
"CSAFPID-1770553",
"CSAFPID-1770554",
"CSAFPID-1288368",
"CSAFPID-1770547",
"CSAFPID-1770548",
"CSAFPID-1288369",
"CSAFPID-1770550",
"CSAFPID-1770549",
"CSAFPID-1288320",
"CSAFPID-1770551",
"CSAFPID-1770552",
"CSAFPID-1770555"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53735 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53735.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-2906953",
"CSAFPID-2906952",
"CSAFPID-3049063",
"CSAFPID-3049066",
"CSAFPID-3049201",
"CSAFPID-3049200",
"CSAFPID-1288319",
"CSAFPID-1429573",
"CSAFPID-1429574",
"CSAFPID-3048743",
"CSAFPID-1770557",
"CSAFPID-1770558",
"CSAFPID-3048744",
"CSAFPID-1770553",
"CSAFPID-1770554",
"CSAFPID-1288368",
"CSAFPID-1770547",
"CSAFPID-1770548",
"CSAFPID-1288369",
"CSAFPID-1770550",
"CSAFPID-1770549",
"CSAFPID-1288320",
"CSAFPID-1770551",
"CSAFPID-1770552",
"CSAFPID-1770555"
]
}
],
"title": "CVE-2025-53735"
},
{
"cve": "CVE-2025-53736",
"cwe": {
"id": "CWE-126",
"name": "Buffer Over-read"
},
"notes": [
{
"category": "other",
"text": "Buffer Over-read",
"title": "CWE-126"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2906953",
"CSAFPID-2906952",
"CSAFPID-3049063",
"CSAFPID-3049066",
"CSAFPID-3049201",
"CSAFPID-3049200",
"CSAFPID-1288319",
"CSAFPID-1429573",
"CSAFPID-1429574",
"CSAFPID-3048743",
"CSAFPID-1770557",
"CSAFPID-1770558",
"CSAFPID-3048744",
"CSAFPID-1770553",
"CSAFPID-1770554",
"CSAFPID-1288368",
"CSAFPID-1770547",
"CSAFPID-1770548",
"CSAFPID-1288369",
"CSAFPID-1770550",
"CSAFPID-1770549",
"CSAFPID-1288320",
"CSAFPID-1770551",
"CSAFPID-1770552",
"CSAFPID-1770555"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53736 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53736.json"
}
],
"title": "CVE-2025-53736"
},
{
"cve": "CVE-2025-53737",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "other",
"text": "Heap-based Buffer Overflow",
"title": "CWE-122"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2906953",
"CSAFPID-2906952",
"CSAFPID-3049063",
"CSAFPID-3049066",
"CSAFPID-3049201",
"CSAFPID-3049200",
"CSAFPID-1288319",
"CSAFPID-1429573",
"CSAFPID-1429574",
"CSAFPID-3048743",
"CSAFPID-1770557",
"CSAFPID-1770558",
"CSAFPID-3048744",
"CSAFPID-1770553",
"CSAFPID-1770554",
"CSAFPID-1288368",
"CSAFPID-1770547",
"CSAFPID-1770548",
"CSAFPID-1288369",
"CSAFPID-1770550",
"CSAFPID-1770549",
"CSAFPID-1288320",
"CSAFPID-1770551",
"CSAFPID-1770552",
"CSAFPID-1770555"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53737 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53737.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-2906953",
"CSAFPID-2906952",
"CSAFPID-3049063",
"CSAFPID-3049066",
"CSAFPID-3049201",
"CSAFPID-3049200",
"CSAFPID-1288319",
"CSAFPID-1429573",
"CSAFPID-1429574",
"CSAFPID-3048743",
"CSAFPID-1770557",
"CSAFPID-1770558",
"CSAFPID-3048744",
"CSAFPID-1770553",
"CSAFPID-1770554",
"CSAFPID-1288368",
"CSAFPID-1770547",
"CSAFPID-1770548",
"CSAFPID-1288369",
"CSAFPID-1770550",
"CSAFPID-1770549",
"CSAFPID-1288320",
"CSAFPID-1770551",
"CSAFPID-1770552",
"CSAFPID-1770555"
]
}
],
"title": "CVE-2025-53737"
},
{
"cve": "CVE-2025-53738",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2906953",
"CSAFPID-2906952",
"CSAFPID-3049063",
"CSAFPID-3049066",
"CSAFPID-3049201",
"CSAFPID-3049200",
"CSAFPID-1288319",
"CSAFPID-1429573",
"CSAFPID-1429574",
"CSAFPID-3048743",
"CSAFPID-1770557",
"CSAFPID-1770558",
"CSAFPID-3048744",
"CSAFPID-1770553",
"CSAFPID-1770554",
"CSAFPID-1288368",
"CSAFPID-1770547",
"CSAFPID-1770548",
"CSAFPID-1288369",
"CSAFPID-1770550",
"CSAFPID-1770549",
"CSAFPID-1288320",
"CSAFPID-1770551",
"CSAFPID-1770552",
"CSAFPID-1770555"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53738 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53738.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-2906953",
"CSAFPID-2906952",
"CSAFPID-3049063",
"CSAFPID-3049066",
"CSAFPID-3049201",
"CSAFPID-3049200",
"CSAFPID-1288319",
"CSAFPID-1429573",
"CSAFPID-1429574",
"CSAFPID-3048743",
"CSAFPID-1770557",
"CSAFPID-1770558",
"CSAFPID-3048744",
"CSAFPID-1770553",
"CSAFPID-1770554",
"CSAFPID-1288368",
"CSAFPID-1770547",
"CSAFPID-1770548",
"CSAFPID-1288369",
"CSAFPID-1770550",
"CSAFPID-1770549",
"CSAFPID-1288320",
"CSAFPID-1770551",
"CSAFPID-1770552",
"CSAFPID-1770555"
]
}
],
"title": "CVE-2025-53738"
},
{
"cve": "CVE-2025-53739",
"cwe": {
"id": "CWE-843",
"name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
},
"notes": [
{
"category": "other",
"text": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
"title": "CWE-843"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2906953",
"CSAFPID-2906952",
"CSAFPID-3049063",
"CSAFPID-3049066",
"CSAFPID-3049201",
"CSAFPID-3049200",
"CSAFPID-1288319",
"CSAFPID-1429573",
"CSAFPID-1429574",
"CSAFPID-3048743",
"CSAFPID-1770557",
"CSAFPID-1770558",
"CSAFPID-3048744",
"CSAFPID-1770553",
"CSAFPID-1770554",
"CSAFPID-1288368",
"CSAFPID-1770547",
"CSAFPID-1770548",
"CSAFPID-1288369",
"CSAFPID-1770550",
"CSAFPID-1770549",
"CSAFPID-1288320",
"CSAFPID-1770551",
"CSAFPID-1770552",
"CSAFPID-1770555"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53739 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53739.json"
}
],
"title": "CVE-2025-53739"
},
{
"cve": "CVE-2025-53740",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2906953",
"CSAFPID-2906952",
"CSAFPID-3049063",
"CSAFPID-3049066",
"CSAFPID-3049201",
"CSAFPID-3049200",
"CSAFPID-1288319",
"CSAFPID-1429573",
"CSAFPID-1429574",
"CSAFPID-3048743",
"CSAFPID-1770557",
"CSAFPID-1770558",
"CSAFPID-3048744",
"CSAFPID-1770553",
"CSAFPID-1770554",
"CSAFPID-1288368",
"CSAFPID-1770547",
"CSAFPID-1770548",
"CSAFPID-1288369",
"CSAFPID-1770550",
"CSAFPID-1770549",
"CSAFPID-1288320",
"CSAFPID-1770551",
"CSAFPID-1770552",
"CSAFPID-1770555"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53740 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53740.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-2906953",
"CSAFPID-2906952",
"CSAFPID-3049063",
"CSAFPID-3049066",
"CSAFPID-3049201",
"CSAFPID-3049200",
"CSAFPID-1288319",
"CSAFPID-1429573",
"CSAFPID-1429574",
"CSAFPID-3048743",
"CSAFPID-1770557",
"CSAFPID-1770558",
"CSAFPID-3048744",
"CSAFPID-1770553",
"CSAFPID-1770554",
"CSAFPID-1288368",
"CSAFPID-1770547",
"CSAFPID-1770548",
"CSAFPID-1288369",
"CSAFPID-1770550",
"CSAFPID-1770549",
"CSAFPID-1288320",
"CSAFPID-1770551",
"CSAFPID-1770552",
"CSAFPID-1770555"
]
}
],
"title": "CVE-2025-53740"
},
{
"cve": "CVE-2025-53741",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "other",
"text": "Heap-based Buffer Overflow",
"title": "CWE-122"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2906953",
"CSAFPID-2906952",
"CSAFPID-3049063",
"CSAFPID-3049066",
"CSAFPID-3049201",
"CSAFPID-3049200",
"CSAFPID-1288319",
"CSAFPID-1429573",
"CSAFPID-1429574",
"CSAFPID-3048743",
"CSAFPID-1770557",
"CSAFPID-1770558",
"CSAFPID-3048744",
"CSAFPID-1770553",
"CSAFPID-1770554",
"CSAFPID-1288368",
"CSAFPID-1770547",
"CSAFPID-1770548",
"CSAFPID-1288369",
"CSAFPID-1770550",
"CSAFPID-1770549",
"CSAFPID-1288320",
"CSAFPID-1770551",
"CSAFPID-1770552",
"CSAFPID-1770555"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53741 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53741.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-2906953",
"CSAFPID-2906952",
"CSAFPID-3049063",
"CSAFPID-3049066",
"CSAFPID-3049201",
"CSAFPID-3049200",
"CSAFPID-1288319",
"CSAFPID-1429573",
"CSAFPID-1429574",
"CSAFPID-3048743",
"CSAFPID-1770557",
"CSAFPID-1770558",
"CSAFPID-3048744",
"CSAFPID-1770553",
"CSAFPID-1770554",
"CSAFPID-1288368",
"CSAFPID-1770547",
"CSAFPID-1770548",
"CSAFPID-1288369",
"CSAFPID-1770550",
"CSAFPID-1770549",
"CSAFPID-1288320",
"CSAFPID-1770551",
"CSAFPID-1770552",
"CSAFPID-1770555"
]
}
],
"title": "CVE-2025-53741"
},
{
"cve": "CVE-2025-53759",
"cwe": {
"id": "CWE-908",
"name": "Use of Uninitialized Resource"
},
"notes": [
{
"category": "other",
"text": "Use of Uninitialized Resource",
"title": "CWE-908"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2906953",
"CSAFPID-2906952",
"CSAFPID-3049063",
"CSAFPID-3049066",
"CSAFPID-3049201",
"CSAFPID-3049200",
"CSAFPID-1288319",
"CSAFPID-1429573",
"CSAFPID-1429574",
"CSAFPID-3048743",
"CSAFPID-1770557",
"CSAFPID-1770558",
"CSAFPID-3048744",
"CSAFPID-1770553",
"CSAFPID-1770554",
"CSAFPID-1288368",
"CSAFPID-1770547",
"CSAFPID-1770548",
"CSAFPID-1288369",
"CSAFPID-1770550",
"CSAFPID-1770549",
"CSAFPID-1288320",
"CSAFPID-1770551",
"CSAFPID-1770552",
"CSAFPID-1770555"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53759 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53759.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-2906953",
"CSAFPID-2906952",
"CSAFPID-3049063",
"CSAFPID-3049066",
"CSAFPID-3049201",
"CSAFPID-3049200",
"CSAFPID-1288319",
"CSAFPID-1429573",
"CSAFPID-1429574",
"CSAFPID-3048743",
"CSAFPID-1770557",
"CSAFPID-1770558",
"CSAFPID-3048744",
"CSAFPID-1770553",
"CSAFPID-1770554",
"CSAFPID-1288368",
"CSAFPID-1770547",
"CSAFPID-1770548",
"CSAFPID-1288369",
"CSAFPID-1770550",
"CSAFPID-1770549",
"CSAFPID-1288320",
"CSAFPID-1770551",
"CSAFPID-1770552",
"CSAFPID-1770555"
]
}
],
"title": "CVE-2025-53759"
},
{
"cve": "CVE-2025-53760",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"notes": [
{
"category": "other",
"text": "Server-Side Request Forgery (SSRF)",
"title": "CWE-918"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2906953",
"CSAFPID-2906952",
"CSAFPID-3049063",
"CSAFPID-3049066",
"CSAFPID-3049201",
"CSAFPID-3049200",
"CSAFPID-1288319",
"CSAFPID-1429573",
"CSAFPID-1429574",
"CSAFPID-3048743",
"CSAFPID-1770557",
"CSAFPID-1770558",
"CSAFPID-3048744",
"CSAFPID-1770553",
"CSAFPID-1770554",
"CSAFPID-1288368",
"CSAFPID-1770547",
"CSAFPID-1770548",
"CSAFPID-1288369",
"CSAFPID-1770550",
"CSAFPID-1770549",
"CSAFPID-1288320",
"CSAFPID-1770551",
"CSAFPID-1770552",
"CSAFPID-1770555"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53760 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53760.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-2906953",
"CSAFPID-2906952",
"CSAFPID-3049063",
"CSAFPID-3049066",
"CSAFPID-3049201",
"CSAFPID-3049200",
"CSAFPID-1288319",
"CSAFPID-1429573",
"CSAFPID-1429574",
"CSAFPID-3048743",
"CSAFPID-1770557",
"CSAFPID-1770558",
"CSAFPID-3048744",
"CSAFPID-1770553",
"CSAFPID-1770554",
"CSAFPID-1288368",
"CSAFPID-1770547",
"CSAFPID-1770548",
"CSAFPID-1288369",
"CSAFPID-1770550",
"CSAFPID-1770549",
"CSAFPID-1288320",
"CSAFPID-1770551",
"CSAFPID-1770552",
"CSAFPID-1770555"
]
}
],
"title": "CVE-2025-53760"
},
{
"cve": "CVE-2025-53761",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2906953",
"CSAFPID-2906952",
"CSAFPID-3049063",
"CSAFPID-3049066",
"CSAFPID-3049201",
"CSAFPID-3049200",
"CSAFPID-1288319",
"CSAFPID-1429573",
"CSAFPID-1429574",
"CSAFPID-3048743",
"CSAFPID-1770557",
"CSAFPID-1770558",
"CSAFPID-3048744",
"CSAFPID-1770553",
"CSAFPID-1770554",
"CSAFPID-1288368",
"CSAFPID-1770547",
"CSAFPID-1770548",
"CSAFPID-1288369",
"CSAFPID-1770550",
"CSAFPID-1770549",
"CSAFPID-1288320",
"CSAFPID-1770551",
"CSAFPID-1770552",
"CSAFPID-1770555"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53761 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53761.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-2906953",
"CSAFPID-2906952",
"CSAFPID-3049063",
"CSAFPID-3049066",
"CSAFPID-3049201",
"CSAFPID-3049200",
"CSAFPID-1288319",
"CSAFPID-1429573",
"CSAFPID-1429574",
"CSAFPID-3048743",
"CSAFPID-1770557",
"CSAFPID-1770558",
"CSAFPID-3048744",
"CSAFPID-1770553",
"CSAFPID-1770554",
"CSAFPID-1288368",
"CSAFPID-1770547",
"CSAFPID-1770548",
"CSAFPID-1288369",
"CSAFPID-1770550",
"CSAFPID-1770549",
"CSAFPID-1288320",
"CSAFPID-1770551",
"CSAFPID-1770552",
"CSAFPID-1770555"
]
}
],
"title": "CVE-2025-53761"
},
{
"cve": "CVE-2025-53766",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "other",
"text": "Heap-based Buffer Overflow",
"title": "CWE-122"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2906953",
"CSAFPID-2906952",
"CSAFPID-3049063",
"CSAFPID-3049066",
"CSAFPID-3049201",
"CSAFPID-3049200",
"CSAFPID-1288319",
"CSAFPID-1429573",
"CSAFPID-1429574",
"CSAFPID-3048743",
"CSAFPID-1770557",
"CSAFPID-1770558",
"CSAFPID-3048744",
"CSAFPID-1770553",
"CSAFPID-1770554",
"CSAFPID-1288368",
"CSAFPID-1770547",
"CSAFPID-1770548",
"CSAFPID-1288369",
"CSAFPID-1770550",
"CSAFPID-1770549",
"CSAFPID-1288320",
"CSAFPID-1770551",
"CSAFPID-1770552",
"CSAFPID-1770555"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53766 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53766.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-2906953",
"CSAFPID-2906952",
"CSAFPID-3049063",
"CSAFPID-3049066",
"CSAFPID-3049201",
"CSAFPID-3049200",
"CSAFPID-1288319",
"CSAFPID-1429573",
"CSAFPID-1429574",
"CSAFPID-3048743",
"CSAFPID-1770557",
"CSAFPID-1770558",
"CSAFPID-3048744",
"CSAFPID-1770553",
"CSAFPID-1770554",
"CSAFPID-1288368",
"CSAFPID-1770547",
"CSAFPID-1770548",
"CSAFPID-1288369",
"CSAFPID-1770550",
"CSAFPID-1770549",
"CSAFPID-1288320",
"CSAFPID-1770551",
"CSAFPID-1770552",
"CSAFPID-1770555"
]
}
],
"title": "CVE-2025-53766"
},
{
"cve": "CVE-2025-53783",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "other",
"text": "Heap-based Buffer Overflow",
"title": "CWE-122"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2906953",
"CSAFPID-2906952",
"CSAFPID-3049063",
"CSAFPID-3049066",
"CSAFPID-3049201",
"CSAFPID-3049200",
"CSAFPID-1288319",
"CSAFPID-1429573",
"CSAFPID-1429574",
"CSAFPID-3048743",
"CSAFPID-1770557",
"CSAFPID-1770558",
"CSAFPID-3048744",
"CSAFPID-1770553",
"CSAFPID-1770554",
"CSAFPID-1288368",
"CSAFPID-1770547",
"CSAFPID-1770548",
"CSAFPID-1288369",
"CSAFPID-1770550",
"CSAFPID-1770549",
"CSAFPID-1288320",
"CSAFPID-1770551",
"CSAFPID-1770552",
"CSAFPID-1770555"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53783 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53783.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-2906953",
"CSAFPID-2906952",
"CSAFPID-3049063",
"CSAFPID-3049066",
"CSAFPID-3049201",
"CSAFPID-3049200",
"CSAFPID-1288319",
"CSAFPID-1429573",
"CSAFPID-1429574",
"CSAFPID-3048743",
"CSAFPID-1770557",
"CSAFPID-1770558",
"CSAFPID-3048744",
"CSAFPID-1770553",
"CSAFPID-1770554",
"CSAFPID-1288368",
"CSAFPID-1770547",
"CSAFPID-1770548",
"CSAFPID-1288369",
"CSAFPID-1770550",
"CSAFPID-1770549",
"CSAFPID-1288320",
"CSAFPID-1770551",
"CSAFPID-1770552",
"CSAFPID-1770555"
]
}
],
"title": "CVE-2025-53783"
},
{
"cve": "CVE-2025-53784",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2906953",
"CSAFPID-2906952",
"CSAFPID-3049063",
"CSAFPID-3049066",
"CSAFPID-3049201",
"CSAFPID-3049200",
"CSAFPID-1288319",
"CSAFPID-1429573",
"CSAFPID-1429574",
"CSAFPID-3048743",
"CSAFPID-1770557",
"CSAFPID-1770558",
"CSAFPID-3048744",
"CSAFPID-1770553",
"CSAFPID-1770554",
"CSAFPID-1288368",
"CSAFPID-1770547",
"CSAFPID-1770548",
"CSAFPID-1288369",
"CSAFPID-1770550",
"CSAFPID-1770549",
"CSAFPID-1288320",
"CSAFPID-1770551",
"CSAFPID-1770552",
"CSAFPID-1770555"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53784 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53784.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-2906953",
"CSAFPID-2906952",
"CSAFPID-3049063",
"CSAFPID-3049066",
"CSAFPID-3049201",
"CSAFPID-3049200",
"CSAFPID-1288319",
"CSAFPID-1429573",
"CSAFPID-1429574",
"CSAFPID-3048743",
"CSAFPID-1770557",
"CSAFPID-1770558",
"CSAFPID-3048744",
"CSAFPID-1770553",
"CSAFPID-1770554",
"CSAFPID-1288368",
"CSAFPID-1770547",
"CSAFPID-1770548",
"CSAFPID-1288369",
"CSAFPID-1770550",
"CSAFPID-1770549",
"CSAFPID-1288320",
"CSAFPID-1770551",
"CSAFPID-1770552",
"CSAFPID-1770555"
]
}
],
"title": "CVE-2025-53784"
}
]
}
NCSC-2025-0251
Vulnerability from csaf_ncscnl - Published: 2025-08-13 07:25 - Updated: 2025-08-13 07:25Summary
Kwetsbaarheden verholpen in Microsoft Windows
Notes
The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:
NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.
NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.
This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.
Feiten
Microsoft heeft kwetsbaarheden verholpen in Windows, waaronder Hyper-V, Graphics Component, en Routing and Remote Access Service (RRAS).
Interpretaties
De kwetsbaarheden omvatten verschillende soorten aanvallen, zoals lokale privilege-escalatie, onterecht toegang tot gevoelige informatie, en de mogelijkheid voor ongeautoriseerde code-uitvoering.
```
Windows Security App:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-53769 | 5.50 | Voordoen als andere gebruiker |
|----------------|------|-------------------------------------|
Windows StateRepository API:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-53789 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|
Windows Win32K - GRFX:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-50161 | 7.30 | Verkrijgen van verhoogde rechten |
| CVE-2025-53132 | 8.00 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|
Desktop Windows Manager:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-50153 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2025-53152 | 7.80 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|
Graphics Kernel:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-50176 | 7.80 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|
Windows NTLM:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-53778 | 8.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|
Windows Ancillary Function Driver for WinSock:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-49762 | 7.00 | Verkrijgen van verhoogde rechten |
| CVE-2025-53134 | 7.00 | Verkrijgen van verhoogde rechten |
| CVE-2025-53137 | 7.00 | Verkrijgen van verhoogde rechten |
| CVE-2025-53141 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2025-53147 | 7.00 | Verkrijgen van verhoogde rechten |
| CVE-2025-53154 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2025-53718 | 7.00 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|
Windows Kernel:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-49761 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2025-53151 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|
Storage Port Driver:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-53156 | 5.50 | Toegang tot gevoelige gegevens |
|----------------|------|-------------------------------------|
Kernel Transaction Manager:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-53140 | 7.00 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|
Microsoft Brokering File System:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-53142 | 7.00 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|
Windows Connected Devices Platform Service:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-53721 | 7.00 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|
Windows Installer:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-50173 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|
Microsoft Graphics Component:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-49743 | 6.70 | Verkrijgen van verhoogde rechten |
| CVE-2025-50165 | 9.80 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|
Remote Desktop Server:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-50171 | 9.10 | Voordoen als andere gebruiker |
|----------------|------|-------------------------------------|
Windows Kerberos:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-53779 | 7.20 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|
Windows Routing and Remote Access Service (RRAS):
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-49757 | 8.80 | Uitvoeren van willekeurige code |
| CVE-2025-50156 | 5.70 | Toegang tot gevoelige gegevens |
| CVE-2025-50160 | 8.00 | Uitvoeren van willekeurige code |
| CVE-2025-50162 | 8.00 | Uitvoeren van willekeurige code |
| CVE-2025-50163 | 8.80 | Uitvoeren van willekeurige code |
| CVE-2025-50164 | 8.00 | Uitvoeren van willekeurige code |
| CVE-2025-53138 | 5.70 | Toegang tot gevoelige gegevens |
| CVE-2025-53148 | 5.70 | Toegang tot gevoelige gegevens |
| CVE-2025-53153 | 5.70 | Toegang tot gevoelige gegevens |
| CVE-2025-53719 | 5.70 | Toegang tot gevoelige gegevens |
| CVE-2025-53720 | 8.00 | Uitvoeren van willekeurige code |
| CVE-2025-50157 | 5.70 | Toegang tot gevoelige gegevens |
|----------------|------|-------------------------------------|
Windows NTFS:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-50158 | 7.00 | Toegang tot gevoelige gegevens |
|----------------|------|-------------------------------------|
Role: Windows Hyper-V:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-49751 | 6.80 | Denial-of-Service |
| CVE-2025-50167 | 7.00 | Verkrijgen van verhoogde rechten |
| CVE-2025-53155 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2025-53723 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2025-48807 | 7.50 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|
Windows NT OS Kernel:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-53136 | 5.50 | Toegang tot gevoelige gegevens |
|----------------|------|-------------------------------------|
Windows PrintWorkflowUserSvc:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-53133 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|
Windows Push Notifications:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-53724 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2025-53725 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2025-53726 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2025-50155 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|
Windows File Explorer:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-50154 | 7.50 | Voordoen als andere gebruiker |
|----------------|------|-------------------------------------|
Windows Remote Desktop Services:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-53722 | 7.50 | Denial-of-Service |
|----------------|------|-------------------------------------|
Windows Media:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-53131 | 8.80 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|
Windows Distributed Transaction Coordinator:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-50166 | 6.50 | Toegang tot gevoelige gegevens |
|----------------|------|-------------------------------------|
Windows SMB:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-50169 | 7.50 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|
Kernel Streaming WOW Thunk Service Driver:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-53149 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|
Windows Cloud Files Mini Filter Driver:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-50170 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|
Windows DirectX:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-50172 | 6.50 | Denial-of-Service |
| CVE-2025-53135 | 7.00 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|
Remote Access Point-to-Point Protocol (PPP) EAP-TLS:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-50159 | 7.30 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|
Windows Local Security Authority Subsystem Service (LSASS):
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-53716 | 6.50 | Denial-of-Service |
|----------------|------|-------------------------------------|
Windows GDI+:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-53766 | 9.80 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|
Windows Message Queuing:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-50177 | 8.10 | Uitvoeren van willekeurige code |
| CVE-2025-53143 | 8.80 | Uitvoeren van willekeurige code |
| CVE-2025-53144 | 8.80 | Uitvoeren van willekeurige code |
| CVE-2025-53145 | 8.80 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|
Windows Win32K - ICOMP:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-50168 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|
```
Oplossingen
Microsoft heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.
Kans
medium
Schade
high
CWE-197
Numeric Truncation Error
CWE-820
Missing Synchronization
CWE-1390
Weak Authentication
CWE-923
Improper Restriction of Communication Channel to Intended Endpoints
CWE-822
Untrusted Pointer Dereference
CWE-280
Improper Handling of Insufficient Permissions or Privileges
CWE-367
Time-of-check Time-of-use (TOCTOU) Race Condition
CWE-415
Double Free
CWE-908
Use of Uninitialized Resource
CWE-843
Access of Resource Using Incompatible Type ('Type Confusion')
CWE-23
Relative Path Traversal
CWE-190
Integer Overflow or Wraparound
CWE-362
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CWE-125
Out-of-bounds Read
CWE-306
Missing Authentication for Critical Function
CWE-862
Missing Authorization
CWE-416
Use After Free
CWE-476
NULL Pointer Dereference
CWE-400
Uncontrolled Resource Consumption
CWE-770
Allocation of Resources Without Limits or Throttling
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
CWE-122
Heap-based Buffer Overflow
CWE-73
External Control of File Name or Path
CWE-287
Improper Authentication
{
"document": {
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE"
}
},
"lang": "nl",
"notes": [
{
"category": "legal_disclaimer",
"text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
},
{
"category": "description",
"text": "Microsoft heeft kwetsbaarheden verholpen in Windows, waaronder Hyper-V, Graphics Component, en Routing and Remote Access Service (RRAS).",
"title": "Feiten"
},
{
"category": "description",
"text": "De kwetsbaarheden omvatten verschillende soorten aanvallen, zoals lokale privilege-escalatie, onterecht toegang tot gevoelige informatie, en de mogelijkheid voor ongeautoriseerde code-uitvoering. \n```\nWindows Security App: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2025-53769 | 5.50 | Voordoen als andere gebruiker | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2025-53789 | 7.80 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2025-50161 | 7.30 | Verkrijgen van verhoogde rechten | \n| CVE-2025-53132 | 8.00 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n\nDesktop Windows Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2025-50153 | 7.80 | Verkrijgen van verhoogde rechten | \n| CVE-2025-53152 | 7.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nGraphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2025-50176 | 7.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nWindows NTLM: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2025-53778 | 8.80 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2025-49762 | 7.00 | Verkrijgen van verhoogde rechten | \n| CVE-2025-53134 | 7.00 | Verkrijgen van verhoogde rechten | \n| CVE-2025-53137 | 7.00 | Verkrijgen van verhoogde rechten | \n| CVE-2025-53141 | 7.80 | Verkrijgen van verhoogde rechten | \n| CVE-2025-53147 | 7.00 | Verkrijgen van verhoogde rechten | \n| CVE-2025-53154 | 7.80 | Verkrijgen van verhoogde rechten | \n| CVE-2025-53718 | 7.00 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2025-49761 | 7.80 | Verkrijgen van verhoogde rechten | \n| CVE-2025-53151 | 7.80 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n\nStorage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2025-53156 | 5.50 | Toegang tot gevoelige gegevens | \n|----------------|------|-------------------------------------|\n\nKernel Transaction Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2025-53140 | 7.00 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n\nMicrosoft Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2025-53142 | 7.00 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n\nWindows Connected Devices Platform Service: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2025-53721 | 7.00 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2025-50173 | 7.80 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2025-49743 | 6.70 | Verkrijgen van verhoogde rechten | \n| CVE-2025-50165 | 9.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Server: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2025-50171 | 9.10 | Voordoen als andere gebruiker | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2025-53779 | 7.20 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2025-49757 | 8.80 | Uitvoeren van willekeurige code | \n| CVE-2025-50156 | 5.70 | Toegang tot gevoelige gegevens | \n| CVE-2025-50160 | 8.00 | Uitvoeren van willekeurige code | \n| CVE-2025-50162 | 8.00 | Uitvoeren van willekeurige code | \n| CVE-2025-50163 | 8.80 | Uitvoeren van willekeurige code | \n| CVE-2025-50164 | 8.00 | Uitvoeren van willekeurige code | \n| CVE-2025-53138 | 5.70 | Toegang tot gevoelige gegevens | \n| CVE-2025-53148 | 5.70 | Toegang tot gevoelige gegevens | \n| CVE-2025-53153 | 5.70 | Toegang tot gevoelige gegevens | \n| CVE-2025-53719 | 5.70 | Toegang tot gevoelige gegevens | \n| CVE-2025-53720 | 8.00 | Uitvoeren van willekeurige code | \n| CVE-2025-50157 | 5.70 | Toegang tot gevoelige gegevens | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2025-50158 | 7.00 | Toegang tot gevoelige gegevens | \n|----------------|------|-------------------------------------|\n\nRole: Windows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2025-49751 | 6.80 | Denial-of-Service | \n| CVE-2025-50167 | 7.00 | Verkrijgen van verhoogde rechten | \n| CVE-2025-53155 | 7.80 | Verkrijgen van verhoogde rechten | \n| CVE-2025-53723 | 7.80 | Verkrijgen van verhoogde rechten | \n| CVE-2025-48807 | 7.50 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nWindows NT OS Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2025-53136 | 5.50 | Toegang tot gevoelige gegevens | \n|----------------|------|-------------------------------------|\n\nWindows PrintWorkflowUserSvc: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2025-53133 | 7.80 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2025-53724 | 7.80 | Verkrijgen van verhoogde rechten | \n| CVE-2025-53725 | 7.80 | Verkrijgen van verhoogde rechten | \n| CVE-2025-53726 | 7.80 | Verkrijgen van verhoogde rechten | \n| CVE-2025-50155 | 7.80 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2025-50154 | 7.50 | Voordoen als andere gebruiker | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2025-53722 | 7.50 | Denial-of-Service | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2025-53131 | 8.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nWindows Distributed Transaction Coordinator: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2025-50166 | 6.50 | Toegang tot gevoelige gegevens | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2025-50169 | 7.50 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nKernel Streaming WOW Thunk Service Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2025-53149 | 7.80 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2025-50170 | 7.80 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2025-50172 | 6.50 | Denial-of-Service | \n| CVE-2025-53135 | 7.00 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n\nRemote Access Point-to-Point Protocol (PPP) EAP-TLS: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2025-50159 | 7.30 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2025-53716 | 6.50 | Denial-of-Service | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2025-53766 | 9.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2025-50177 | 8.10 | Uitvoeren van willekeurige code | \n| CVE-2025-53143 | 8.80 | Uitvoeren van willekeurige code | \n| CVE-2025-53144 | 8.80 | Uitvoeren van willekeurige code | \n| CVE-2025-53145 | 8.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - ICOMP: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2025-50168 | 7.80 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n```",
"title": "Interpretaties"
},
{
"category": "description",
"text": "Microsoft heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.",
"title": "Oplossingen"
},
{
"category": "general",
"text": "medium",
"title": "Kans"
},
{
"category": "general",
"text": "high",
"title": "Schade"
},
{
"category": "general",
"text": "Numeric Truncation Error",
"title": "CWE-197"
},
{
"category": "general",
"text": "Missing Synchronization",
"title": "CWE-820"
},
{
"category": "general",
"text": "Weak Authentication",
"title": "CWE-1390"
},
{
"category": "general",
"text": "Improper Restriction of Communication Channel to Intended Endpoints",
"title": "CWE-923"
},
{
"category": "general",
"text": "Untrusted Pointer Dereference",
"title": "CWE-822"
},
{
"category": "general",
"text": "Improper Handling of Insufficient Permissions or Privileges ",
"title": "CWE-280"
},
{
"category": "general",
"text": "Time-of-check Time-of-use (TOCTOU) Race Condition",
"title": "CWE-367"
},
{
"category": "general",
"text": "Double Free",
"title": "CWE-415"
},
{
"category": "general",
"text": "Use of Uninitialized Resource",
"title": "CWE-908"
},
{
"category": "general",
"text": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
"title": "CWE-843"
},
{
"category": "general",
"text": "Relative Path Traversal",
"title": "CWE-23"
},
{
"category": "general",
"text": "Integer Overflow or Wraparound",
"title": "CWE-190"
},
{
"category": "general",
"text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
"title": "CWE-362"
},
{
"category": "general",
"text": "Out-of-bounds Read",
"title": "CWE-125"
},
{
"category": "general",
"text": "Missing Authentication for Critical Function",
"title": "CWE-306"
},
{
"category": "general",
"text": "Missing Authorization",
"title": "CWE-862"
},
{
"category": "general",
"text": "Use After Free",
"title": "CWE-416"
},
{
"category": "general",
"text": "NULL Pointer Dereference",
"title": "CWE-476"
},
{
"category": "general",
"text": "Uncontrolled Resource Consumption",
"title": "CWE-400"
},
{
"category": "general",
"text": "Allocation of Resources Without Limits or Throttling",
"title": "CWE-770"
},
{
"category": "general",
"text": "Exposure of Sensitive Information to an Unauthorized Actor",
"title": "CWE-200"
},
{
"category": "general",
"text": "Heap-based Buffer Overflow",
"title": "CWE-122"
},
{
"category": "general",
"text": "External Control of File Name or Path",
"title": "CWE-73"
},
{
"category": "general",
"text": "Improper Authentication",
"title": "CWE-287"
}
],
"publisher": {
"category": "coordinator",
"contact_details": "cert@ncsc.nl",
"name": "Nationaal Cyber Security Centrum",
"namespace": "https://www.ncsc.nl/"
},
"references": [
{
"category": "external",
"summary": "Reference",
"url": "https://portal.msrc.microsoft.com/en-us/security-guidance"
}
],
"title": "Kwetsbaarheden verholpen in Microsoft Windows",
"tracking": {
"current_release_date": "2025-08-13T07:25:08.789693Z",
"generator": {
"date": "2025-08-04T16:30:00Z",
"engine": {
"name": "V.A.",
"version": "1.2"
}
},
"id": "NCSC-2025-0251",
"initial_release_date": "2025-08-13T07:25:08.789693Z",
"revision_history": [
{
"date": "2025-08-13T07:25:08.789693Z",
"number": "1.0.0",
"summary": "Initiele versie"
}
],
"status": "final",
"version": "1.0.0"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/10.0.19045.0|\u003c10.0.19044.6093",
"product": {
"name": "vers:unknown/10.0.19045.0|\u003c10.0.19044.6093",
"product_id": "CSAFPID-3048680"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/10.0.19045.0|\u003c10.0.19045.6216",
"product": {
"name": "vers:unknown/10.0.19045.0|\u003c10.0.19045.6216",
"product_id": "CSAFPID-3048714"
}
}
],
"category": "product_name",
"name": "Windows 10 Version 22H2"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:microsoft/10.0.19045.6216",
"product": {
"name": "vers:microsoft/10.0.19045.6216",
"product_id": "CSAFPID-3048833",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10_22H2:10.0.19045.6216:*:*:*:*:*:x86:*"
}
}
}
],
"category": "product_name",
"name": "Windows 10 Version 22H2 for 32-bit Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:microsoft/10.0.19045.6216",
"product": {
"name": "vers:microsoft/10.0.19045.6216",
"product_id": "CSAFPID-3048832",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10_22H2:10.0.19045.6216:*:*:*:*:*:arm64:*"
}
}
}
],
"category": "product_name",
"name": "Windows 10 Version 22H2 for ARM64-based Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:microsoft/10.0.19045.6216",
"product": {
"name": "vers:microsoft/10.0.19045.6216",
"product_id": "CSAFPID-3048803",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10_22H2:10.0.19045.6216:*:*:*:*:*:x64:*"
}
}
}
],
"category": "product_name",
"name": "Windows 10 Version 22H2 for x64-based Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:microsoft/10.0.10240.21100",
"product": {
"name": "vers:microsoft/10.0.10240.21100",
"product_id": "CSAFPID-3048834",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10_1507:10.0.10240.21100:*:*:*:*:*:x86:*"
}
}
}
],
"category": "product_name",
"name": "Windows 10 for 32-bit Systems"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:microsoft/10.0.10240.21100",
"product": {
"name": "vers:microsoft/10.0.10240.21100",
"product_id": "CSAFPID-3048835",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10_1507:10.0.10240.21100:*:*:*:*:*:x64:*"
}
}
}
],
"category": "product_name",
"name": "Windows 10 for x64-based Systems"
}
],
"category": "product_family",
"name": "Windows"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:microsoft/10.0.22000.3533 on aarch64",
"product": {
"name": "vers:microsoft/10.0.22000.3533 on aarch64",
"product_id": "CSAFPID-2978754"
}
},
{
"category": "product_version_range",
"name": "vers:microsoft/10.0.22000.3533 on x86 64",
"product": {
"name": "vers:microsoft/10.0.22000.3533 on x86 64",
"product_id": "CSAFPID-2978746"
}
},
{
"category": "product_version_range",
"name": "vers:microsoft/10.0.22000.3592 on aarch64",
"product": {
"name": "vers:microsoft/10.0.22000.3592 on aarch64",
"product_id": "CSAFPID-3048961"
}
},
{
"category": "product_version_range",
"name": "vers:microsoft/10.0.22000.3592 on x86 64",
"product": {
"name": "vers:microsoft/10.0.22000.3592 on x86 64",
"product_id": "CSAFPID-3048960"
}
},
{
"category": "product_version_range",
"name": "vers:microsoft/10.0.22000.3839 on aarch64",
"product": {
"name": "vers:microsoft/10.0.22000.3839 on aarch64",
"product_id": "CSAFPID-3049105"
}
},
{
"category": "product_version_range",
"name": "vers:microsoft/10.0.22000.3839 on x86 64",
"product": {
"name": "vers:microsoft/10.0.22000.3839 on x86 64",
"product_id": "CSAFPID-3049112"
}
}
],
"category": "product_name",
"name": "Windows 11 21h2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:microsoft/10.0.22621.4659 on aarch64",
"product": {
"name": "vers:microsoft/10.0.22621.4659 on aarch64",
"product_id": "CSAFPID-3049081"
}
},
{
"category": "product_version_range",
"name": "vers:microsoft/10.0.22621.4659 on x86 64",
"product": {
"name": "vers:microsoft/10.0.22621.4659 on x86 64",
"product_id": "CSAFPID-3049085"
}
},
{
"category": "product_version_range",
"name": "vers:microsoft/10.0.22621.4880 on aarch64",
"product": {
"name": "vers:microsoft/10.0.22621.4880 on aarch64",
"product_id": "CSAFPID-3049104"
}
},
{
"category": "product_version_range",
"name": "vers:microsoft/10.0.22621.4880 on x86 64",
"product": {
"name": "vers:microsoft/10.0.22621.4880 on x86 64",
"product_id": "CSAFPID-3049115"
}
},
{
"category": "product_version_range",
"name": "vers:microsoft/10.0.22621.5033 on aarch64",
"product": {
"name": "vers:microsoft/10.0.22621.5033 on aarch64",
"product_id": "CSAFPID-3048967"
}
},
{
"category": "product_version_range",
"name": "vers:microsoft/10.0.22621.5033 on x86 64",
"product": {
"name": "vers:microsoft/10.0.22621.5033 on x86 64",
"product_id": "CSAFPID-3048970"
}
},
{
"category": "product_version_range",
"name": "vers:microsoft/10.0.22621.5624 on aarch64",
"product": {
"name": "vers:microsoft/10.0.22621.5624 on aarch64",
"product_id": "CSAFPID-2978663"
}
},
{
"category": "product_version_range",
"name": "vers:microsoft/10.0.22621.5624 on x86 64",
"product": {
"name": "vers:microsoft/10.0.22621.5624 on x86 64",
"product_id": "CSAFPID-2978670"
}
},
{
"category": "product_version_range",
"name": "vers:microsoft/10.0.22621.5768 on aarch64",
"product": {
"name": "vers:microsoft/10.0.22621.5768 on aarch64",
"product_id": "CSAFPID-3048906"
}
},
{
"category": "product_version_range",
"name": "vers:microsoft/10.0.22621.5768 on x64",
"product": {
"name": "vers:microsoft/10.0.22621.5768 on x64",
"product_id": "CSAFPID-3049076"
}
},
{
"category": "product_version_range",
"name": "vers:microsoft/10.0.22621.5768 on x86 64",
"product": {
"name": "vers:microsoft/10.0.22621.5768 on x86 64",
"product_id": "CSAFPID-3048927"
}
},
{
"category": "product_version_range",
"name": "vers:microsoft/10.0.22631.5624 on aarch64",
"product": {
"name": "vers:microsoft/10.0.22631.5624 on aarch64",
"product_id": "CSAFPID-3049188"
}
}
],
"category": "product_name",
"name": "Windows 11 22H2"
}
],
"category": "product_family",
"name": "Microsoft"
}
],
"category": "vendor",
"name": "Microsoft"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-48807",
"cwe": {
"id": "CWE-923",
"name": "Improper Restriction of Communication Channel to Intended Endpoints"
},
"notes": [
{
"category": "other",
"text": "Improper Restriction of Communication Channel to Intended Endpoints",
"title": "CWE-923"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-48807 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-48807.json"
}
],
"title": "CVE-2025-48807"
},
{
"cve": "CVE-2025-49743",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "other",
"text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
"title": "CWE-362"
},
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-49743 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-49743.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
}
],
"title": "CVE-2025-49743"
},
{
"cve": "CVE-2025-49751",
"cwe": {
"id": "CWE-820",
"name": "Missing Synchronization"
},
"notes": [
{
"category": "other",
"text": "Missing Synchronization",
"title": "CWE-820"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-49751 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-49751.json"
}
],
"title": "CVE-2025-49751"
},
{
"cve": "CVE-2025-49757",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "other",
"text": "Heap-based Buffer Overflow",
"title": "CWE-122"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-49757 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-49757.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
}
],
"title": "CVE-2025-49757"
},
{
"cve": "CVE-2025-49761",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-49761 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-49761.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
}
],
"title": "CVE-2025-49761"
},
{
"cve": "CVE-2025-49762",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "other",
"text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
"title": "CWE-362"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-49762 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-49762.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
}
],
"title": "CVE-2025-49762"
},
{
"cve": "CVE-2025-50153",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-50153 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-50153.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
}
],
"title": "CVE-2025-50153"
},
{
"cve": "CVE-2025-50154",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "other",
"text": "Exposure of Sensitive Information to an Unauthorized Actor",
"title": "CWE-200"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-50154 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-50154.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
}
],
"title": "CVE-2025-50154"
},
{
"cve": "CVE-2025-50155",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "other",
"text": "Heap-based Buffer Overflow",
"title": "CWE-122"
},
{
"category": "other",
"text": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
"title": "CWE-843"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-50155 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-50155.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
}
],
"title": "CVE-2025-50155"
},
{
"cve": "CVE-2025-50156",
"cwe": {
"id": "CWE-908",
"name": "Use of Uninitialized Resource"
},
"notes": [
{
"category": "other",
"text": "Use of Uninitialized Resource",
"title": "CWE-908"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-50156 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-50156.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
}
],
"title": "CVE-2025-50156"
},
{
"cve": "CVE-2025-50157",
"cwe": {
"id": "CWE-908",
"name": "Use of Uninitialized Resource"
},
"notes": [
{
"category": "other",
"text": "Use of Uninitialized Resource",
"title": "CWE-908"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-50157 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-50157.json"
}
],
"title": "CVE-2025-50157"
},
{
"cve": "CVE-2025-50158",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"notes": [
{
"category": "other",
"text": "Time-of-check Time-of-use (TOCTOU) Race Condition",
"title": "CWE-367"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-50158 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-50158.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
}
],
"title": "CVE-2025-50158"
},
{
"cve": "CVE-2025-50159",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-50159 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-50159.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
}
],
"title": "CVE-2025-50159"
},
{
"cve": "CVE-2025-50160",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "other",
"text": "Heap-based Buffer Overflow",
"title": "CWE-122"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-50160 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-50160.json"
}
],
"title": "CVE-2025-50160"
},
{
"cve": "CVE-2025-50161",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "other",
"text": "Heap-based Buffer Overflow",
"title": "CWE-122"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-50161 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-50161.json"
}
],
"title": "CVE-2025-50161"
},
{
"cve": "CVE-2025-50162",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "other",
"text": "Heap-based Buffer Overflow",
"title": "CWE-122"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-50162 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-50162.json"
}
],
"title": "CVE-2025-50162"
},
{
"cve": "CVE-2025-50163",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "other",
"text": "Heap-based Buffer Overflow",
"title": "CWE-122"
},
{
"category": "other",
"text": "Out-of-bounds Read",
"title": "CWE-125"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-50163 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-50163.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
}
],
"title": "CVE-2025-50163"
},
{
"cve": "CVE-2025-50164",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "other",
"text": "Heap-based Buffer Overflow",
"title": "CWE-122"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-50164 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-50164.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
}
],
"title": "CVE-2025-50164"
},
{
"cve": "CVE-2025-50165",
"cwe": {
"id": "CWE-822",
"name": "Untrusted Pointer Dereference"
},
"notes": [
{
"category": "other",
"text": "Untrusted Pointer Dereference",
"title": "CWE-822"
},
{
"category": "other",
"text": "Use of Uninitialized Resource",
"title": "CWE-908"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-50165 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-50165.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
}
],
"title": "CVE-2025-50165"
},
{
"cve": "CVE-2025-50166",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "other",
"text": "Integer Overflow or Wraparound",
"title": "CWE-190"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-50166 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-50166.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
}
],
"title": "CVE-2025-50166"
},
{
"cve": "CVE-2025-50167",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "other",
"text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
"title": "CWE-362"
},
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-50167 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-50167.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
}
],
"title": "CVE-2025-50167"
},
{
"cve": "CVE-2025-50168",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "other",
"text": "Heap-based Buffer Overflow",
"title": "CWE-122"
},
{
"category": "other",
"text": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
"title": "CWE-843"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-50168 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-50168.json"
}
],
"title": "CVE-2025-50168"
},
{
"cve": "CVE-2025-50169",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "other",
"text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
"title": "CWE-362"
},
{
"category": "other",
"text": "Double Free",
"title": "CWE-415"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-50169 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-50169.json"
}
],
"title": "CVE-2025-50169"
},
{
"cve": "CVE-2025-50170",
"cwe": {
"id": "CWE-280",
"name": "Improper Handling of Insufficient Permissions or Privileges "
},
"notes": [
{
"category": "other",
"text": "Improper Handling of Insufficient Permissions or Privileges ",
"title": "CWE-280"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-50170 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-50170.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
}
],
"title": "CVE-2025-50170"
},
{
"cve": "CVE-2025-50171",
"cwe": {
"id": "CWE-862",
"name": "Missing Authorization"
},
"notes": [
{
"category": "other",
"text": "Missing Authorization",
"title": "CWE-862"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-50171 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-50171.json"
}
],
"title": "CVE-2025-50171"
},
{
"cve": "CVE-2025-50172",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"notes": [
{
"category": "other",
"text": "Allocation of Resources Without Limits or Throttling",
"title": "CWE-770"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-50172 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-50172.json"
}
],
"title": "CVE-2025-50172"
},
{
"cve": "CVE-2025-50173",
"cwe": {
"id": "CWE-1390",
"name": "Weak Authentication"
},
"notes": [
{
"category": "other",
"text": "Weak Authentication",
"title": "CWE-1390"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-50173 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-50173.json"
}
],
"title": "CVE-2025-50173"
},
{
"cve": "CVE-2025-50176",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "other",
"text": "Heap-based Buffer Overflow",
"title": "CWE-122"
},
{
"category": "other",
"text": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
"title": "CWE-843"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-50176 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-50176.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
}
],
"title": "CVE-2025-50176"
},
{
"cve": "CVE-2025-50177",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "other",
"text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
"title": "CWE-362"
},
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-50177 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-50177.json"
}
],
"title": "CVE-2025-50177"
},
{
"cve": "CVE-2025-53131",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "other",
"text": "Heap-based Buffer Overflow",
"title": "CWE-122"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53131 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53131.json"
}
],
"title": "CVE-2025-53131"
},
{
"cve": "CVE-2025-53132",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "other",
"text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
"title": "CWE-362"
},
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53132 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53132.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
}
],
"title": "CVE-2025-53132"
},
{
"cve": "CVE-2025-53133",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53133 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53133.json"
}
],
"title": "CVE-2025-53133"
},
{
"cve": "CVE-2025-53134",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "other",
"text": "Exposure of Sensitive Information to an Unauthorized Actor",
"title": "CWE-200"
},
{
"category": "other",
"text": "Time-of-check Time-of-use (TOCTOU) Race Condition",
"title": "CWE-367"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53134 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53134.json"
}
],
"title": "CVE-2025-53134"
},
{
"cve": "CVE-2025-53135",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "other",
"text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
"title": "CWE-362"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53135 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53135.json"
}
],
"title": "CVE-2025-53135"
},
{
"cve": "CVE-2025-53136",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "other",
"text": "Exposure of Sensitive Information to an Unauthorized Actor",
"title": "CWE-200"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53136 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53136.json"
}
],
"title": "CVE-2025-53136"
},
{
"cve": "CVE-2025-53137",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53137 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53137.json"
}
],
"title": "CVE-2025-53137"
},
{
"cve": "CVE-2025-53138",
"cwe": {
"id": "CWE-908",
"name": "Use of Uninitialized Resource"
},
"notes": [
{
"category": "other",
"text": "Use of Uninitialized Resource",
"title": "CWE-908"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53138 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53138.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
}
],
"title": "CVE-2025-53138"
},
{
"cve": "CVE-2025-53140",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53140 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53140.json"
}
],
"title": "CVE-2025-53140"
},
{
"cve": "CVE-2025-53141",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "other",
"text": "NULL Pointer Dereference",
"title": "CWE-476"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53141 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53141.json"
}
],
"title": "CVE-2025-53141"
},
{
"cve": "CVE-2025-53142",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53142 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53142.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
}
],
"title": "CVE-2025-53142"
},
{
"cve": "CVE-2025-53143",
"cwe": {
"id": "CWE-843",
"name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
},
"notes": [
{
"category": "other",
"text": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
"title": "CWE-843"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53143 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53143.json"
}
],
"title": "CVE-2025-53143"
},
{
"cve": "CVE-2025-53144",
"cwe": {
"id": "CWE-843",
"name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
},
"notes": [
{
"category": "other",
"text": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
"title": "CWE-843"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53144 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53144.json"
}
],
"title": "CVE-2025-53144"
},
{
"cve": "CVE-2025-53145",
"cwe": {
"id": "CWE-843",
"name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
},
"notes": [
{
"category": "other",
"text": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
"title": "CWE-843"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53145 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53145.json"
}
],
"title": "CVE-2025-53145"
},
{
"cve": "CVE-2025-53147",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53147 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53147.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
}
],
"title": "CVE-2025-53147"
},
{
"cve": "CVE-2025-53148",
"cwe": {
"id": "CWE-908",
"name": "Use of Uninitialized Resource"
},
"notes": [
{
"category": "other",
"text": "Use of Uninitialized Resource",
"title": "CWE-908"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53148 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53148.json"
}
],
"title": "CVE-2025-53148"
},
{
"cve": "CVE-2025-53149",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "other",
"text": "Heap-based Buffer Overflow",
"title": "CWE-122"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53149 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53149.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
}
],
"title": "CVE-2025-53149"
},
{
"cve": "CVE-2025-53151",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53151 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53151.json"
}
],
"title": "CVE-2025-53151"
},
{
"cve": "CVE-2025-53152",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53152 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53152.json"
}
],
"title": "CVE-2025-53152"
},
{
"cve": "CVE-2025-53153",
"cwe": {
"id": "CWE-908",
"name": "Use of Uninitialized Resource"
},
"notes": [
{
"category": "other",
"text": "Use of Uninitialized Resource",
"title": "CWE-908"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53153 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53153.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
}
],
"title": "CVE-2025-53153"
},
{
"cve": "CVE-2025-53154",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "other",
"text": "NULL Pointer Dereference",
"title": "CWE-476"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53154 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53154.json"
}
],
"title": "CVE-2025-53154"
},
{
"cve": "CVE-2025-53155",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "other",
"text": "Heap-based Buffer Overflow",
"title": "CWE-122"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53155 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53155.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
}
],
"title": "CVE-2025-53155"
},
{
"cve": "CVE-2025-53156",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "other",
"text": "Exposure of Sensitive Information to an Unauthorized Actor",
"title": "CWE-200"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53156 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53156.json"
}
],
"title": "CVE-2025-53156"
},
{
"cve": "CVE-2025-53716",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "other",
"text": "NULL Pointer Dereference",
"title": "CWE-476"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53716 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53716.json"
}
],
"title": "CVE-2025-53716"
},
{
"cve": "CVE-2025-53718",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53718 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53718.json"
}
],
"title": "CVE-2025-53718"
},
{
"cve": "CVE-2025-53719",
"cwe": {
"id": "CWE-908",
"name": "Use of Uninitialized Resource"
},
"notes": [
{
"category": "other",
"text": "Use of Uninitialized Resource",
"title": "CWE-908"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53719 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53719.json"
}
],
"title": "CVE-2025-53719"
},
{
"cve": "CVE-2025-53720",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "other",
"text": "Heap-based Buffer Overflow",
"title": "CWE-122"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53720 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53720.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
}
],
"title": "CVE-2025-53720"
},
{
"cve": "CVE-2025-53721",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53721 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53721.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
}
],
"title": "CVE-2025-53721"
},
{
"cve": "CVE-2025-53722",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "other",
"text": "Uncontrolled Resource Consumption",
"title": "CWE-400"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53722 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53722.json"
}
],
"title": "CVE-2025-53722"
},
{
"cve": "CVE-2025-53723",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "other",
"text": "Heap-based Buffer Overflow",
"title": "CWE-122"
},
{
"category": "other",
"text": "Numeric Truncation Error",
"title": "CWE-197"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53723 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53723.json"
}
],
"title": "CVE-2025-53723"
},
{
"cve": "CVE-2025-53724",
"cwe": {
"id": "CWE-843",
"name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
},
"notes": [
{
"category": "other",
"text": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
"title": "CWE-843"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53724 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53724.json"
}
],
"title": "CVE-2025-53724"
},
{
"cve": "CVE-2025-53725",
"cwe": {
"id": "CWE-843",
"name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
},
"notes": [
{
"category": "other",
"text": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
"title": "CWE-843"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53725 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53725.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
}
],
"title": "CVE-2025-53725"
},
{
"cve": "CVE-2025-53726",
"cwe": {
"id": "CWE-843",
"name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
},
"notes": [
{
"category": "other",
"text": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
"title": "CWE-843"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53726 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53726.json"
}
],
"title": "CVE-2025-53726"
},
{
"cve": "CVE-2025-53766",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "other",
"text": "Heap-based Buffer Overflow",
"title": "CWE-122"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53766 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53766.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
}
],
"title": "CVE-2025-53766"
},
{
"cve": "CVE-2025-53769",
"cwe": {
"id": "CWE-73",
"name": "External Control of File Name or Path"
},
"notes": [
{
"category": "other",
"text": "External Control of File Name or Path",
"title": "CWE-73"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53769 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53769.json"
}
],
"title": "CVE-2025-53769"
},
{
"cve": "CVE-2025-53778",
"cwe": {
"id": "CWE-287",
"name": "Improper Authentication"
},
"notes": [
{
"category": "other",
"text": "Improper Authentication",
"title": "CWE-287"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53778 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53778.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
}
],
"title": "CVE-2025-53778"
},
{
"cve": "CVE-2025-53779",
"cwe": {
"id": "CWE-23",
"name": "Relative Path Traversal"
},
"notes": [
{
"category": "other",
"text": "Relative Path Traversal",
"title": "CWE-23"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53779 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53779.json"
}
],
"title": "CVE-2025-53779"
},
{
"cve": "CVE-2025-53789",
"cwe": {
"id": "CWE-306",
"name": "Missing Authentication for Critical Function"
},
"notes": [
{
"category": "other",
"text": "Missing Authentication for Critical Function",
"title": "CWE-306"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53789 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53789.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-3048680",
"CSAFPID-3048714",
"CSAFPID-3048833",
"CSAFPID-3048832",
"CSAFPID-3048803",
"CSAFPID-3048834",
"CSAFPID-3048835",
"CSAFPID-2978754",
"CSAFPID-2978746",
"CSAFPID-3048961",
"CSAFPID-3048960",
"CSAFPID-3049105",
"CSAFPID-3049112",
"CSAFPID-3049081",
"CSAFPID-3049085",
"CSAFPID-3049104",
"CSAFPID-3049115",
"CSAFPID-3048967",
"CSAFPID-3048970",
"CSAFPID-2978663",
"CSAFPID-2978670",
"CSAFPID-3048906",
"CSAFPID-3049076",
"CSAFPID-3048927",
"CSAFPID-3049188"
]
}
],
"title": "CVE-2025-53789"
}
]
}
CERTFR-2025-AVI-0687
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans Microsoft Windows. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Microsoft | N/A | Windows Server 2025 (Server Core installation) versions antérieures à 10.0.26100.4851 | ||
| Microsoft | N/A | Windows 11 Version 22H2 pour systèmes ARM64 versions antérieures à 10.0.22621.5768 | ||
| Microsoft | N/A | Windows 11 Version 22H2 pour systèmes x64 versions antérieures à 10.0.22621.5768 | ||
| Microsoft | N/A | Windows 10 Version 1607 pour systèmes x64 versions antérieures à 10.0.14393.8330 | ||
| Microsoft | N/A | Windows 10 pour systèmes x64 versions antérieures à 10.0.10240.21100 | ||
| Microsoft | N/A | Windows 11 Version 24H2 pour systèmes x64 versions antérieures à 10.0.26100.4851 | ||
| Microsoft | N/A | Windows 10 Version 22H2 pour systèmes 32 bits versions antérieures à 10.0.19045.6216 | ||
| Microsoft | N/A | Windows Server 2025 versions antérieures à 10.0.26100.4851 | ||
| Microsoft | N/A | Windows Server 2012 versions antérieures à 6.2.9200.25622 | ||
| Microsoft | N/A | Windows 10 Version 22H2 pour systèmes ARM64 versions antérieures à 10.0.19045.6216 | ||
| Microsoft | N/A | Windows Server 2012 (Server Core installation) versions antérieures à 6.2.9200.25622 | ||
| Microsoft | N/A | Windows Server 2019 (Server Core installation) versions antérieures à 10.0.17763.7678 | ||
| Microsoft | N/A | Windows 10 Version 21H2 pour systèmes ARM64 versions antérieures à 10.0.19044.6216 | ||
| Microsoft | N/A | Windows Server 2016 (Server Core installation) versions antérieures à 10.0.14393.8330 | ||
| Microsoft | N/A | Windows 10 Version 21H2 pour systèmes x64 versions antérieures à 10.0.19044.6216 | ||
| Microsoft | N/A | Windows 10 Version 1809 pour systèmes x64 versions antérieures à 10.0.17763.7678 | ||
| Microsoft | N/A | Windows 10 Version 1809 pour systèmes 32 bits versions antérieures à 10.0.17763.7678 | ||
| Microsoft | N/A | Windows Server 2022, 23H2 Edition (Server Core installation) versions antérieures à 10.0.25398.1791 | ||
| Microsoft | N/A | Windows Server 2016 versions antérieures à 10.0.14393.8330 | ||
| Microsoft | N/A | Windows Server 2008 pour systèmes 32 bits Service Pack 2 versions antérieures à 6.0.6003.23471 | ||
| Microsoft | N/A | Windows Server 2019 versions antérieures à 10.0.17763.7678 | ||
| Microsoft | N/A | Windows Server 2008 pour systèmes 32 bits Service Pack 2 (Server Core installation) versions antérieures à 6.0.6003.23471 | ||
| Microsoft | N/A | Windows Subsystem pour Linux (WSL2) versions antérieures à 2.5.10 | ||
| Microsoft | N/A | Windows Server 2022 versions antérieures à 10.0.20348.3989 | ||
| Microsoft | N/A | Windows 10 Version 22H2 pour systèmes x64 versions antérieures à 10.0.19045.6216 | ||
| Microsoft | N/A | Windows Server 2008 pour systèmes x64 Service Pack 2 (Server Core installation) versions antérieures à 6.0.6003.23471 | ||
| Microsoft | N/A | Windows 11 Version 24H2 pour systèmes ARM64 versions antérieures à 10.0.26100.4851 | ||
| Microsoft | N/A | Windows Server 2008 R2 pour systèmes x64 Service Pack 1 (Server Core installation) versions antérieures à 6.1.7601.27820 | ||
| Microsoft | N/A | Windows 10 pour systèmes 32 bits versions antérieures à 10.0.10240.21100 | ||
| Microsoft | N/A | Windows 11 Version 23H2 pour systèmes ARM64 versions antérieures à 10.0.22631.5768 | ||
| Microsoft | N/A | Windows Server 2012 R2 versions antérieures à 6.3.9600.22725 | ||
| Microsoft | N/A | Windows 10 Version 21H2 pour systèmes 32 bits versions antérieures à 10.0.19044.6216 | ||
| Microsoft | N/A | Windows 10 Version 1607 pour systèmes 32 bits versions antérieures à 10.0.14393.8330 | ||
| Microsoft | N/A | Windows Server 2008 pour systèmes x64 Service Pack 2 versions antérieures à 6.0.6003.23471 | ||
| Microsoft | N/A | Windows 11 Version 23H2 pour systèmes x64 versions antérieures à 10.0.22631.5768 | ||
| Microsoft | N/A | Windows Server 2012 R2 (Server Core installation) versions antérieures à 6.3.9600.22725 | ||
| Microsoft | N/A | Windows Server 2022 (Server Core installation) versions antérieures à 10.0.20348.3989 | ||
| Microsoft | N/A | Windows Server 2008 R2 pour systèmes x64 Service Pack 1 versions antérieures à 6.1.7601.27872 | ||
| Microsoft | N/A | Windows Server 2008 R2 pour systèmes x64 Service Pack 1 (Server Core installation) versions antérieures à 6.1.7601.27872 |
References
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Windows Server 2025 (Server Core installation) versions ant\u00e9rieures \u00e0 10.0.26100.4851",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 Version 22H2 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.22621.5768",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 Version 22H2 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.22621.5768",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 1607 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.14393.8330",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.10240.21100",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 Version 24H2 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.26100.4851",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 22H2 pour syst\u00e8mes 32 bits versions ant\u00e9rieures \u00e0 10.0.19045.6216",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2025 versions ant\u00e9rieures \u00e0 10.0.26100.4851",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2012 versions ant\u00e9rieures \u00e0 6.2.9200.25622",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 22H2 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.19045.6216",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2012 (Server Core installation) versions ant\u00e9rieures \u00e0 6.2.9200.25622",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2019 (Server Core installation) versions ant\u00e9rieures \u00e0 10.0.17763.7678",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 21H2 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.19044.6216",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2016 (Server Core installation) versions ant\u00e9rieures \u00e0 10.0.14393.8330",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 21H2 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.19044.6216",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 1809 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.17763.7678",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 1809 pour syst\u00e8mes 32 bits versions ant\u00e9rieures \u00e0 10.0.17763.7678",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2022, 23H2 Edition (Server Core installation) versions ant\u00e9rieures \u00e0 10.0.25398.1791",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2016 versions ant\u00e9rieures \u00e0 10.0.14393.8330",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2008 pour syst\u00e8mes 32 bits Service Pack 2 versions ant\u00e9rieures \u00e0 6.0.6003.23471",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2019 versions ant\u00e9rieures \u00e0 10.0.17763.7678",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2008 pour syst\u00e8mes 32 bits Service Pack 2 (Server Core installation) versions ant\u00e9rieures \u00e0 6.0.6003.23471",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Subsystem pour Linux (WSL2) versions ant\u00e9rieures \u00e0 2.5.10",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2022 versions ant\u00e9rieures \u00e0 10.0.20348.3989",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 22H2 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.19045.6216",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2008 pour syst\u00e8mes x64 Service Pack 2 (Server Core installation) versions ant\u00e9rieures \u00e0 6.0.6003.23471",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 Version 24H2 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.26100.4851",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2008 R2 pour syst\u00e8mes x64 Service Pack 1 (Server Core installation) versions ant\u00e9rieures \u00e0 6.1.7601.27820",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 pour syst\u00e8mes 32 bits versions ant\u00e9rieures \u00e0 10.0.10240.21100",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 Version 23H2 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.22631.5768",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2012 R2 versions ant\u00e9rieures \u00e0 6.3.9600.22725",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 21H2 pour syst\u00e8mes 32 bits versions ant\u00e9rieures \u00e0 10.0.19044.6216",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 1607 pour syst\u00e8mes 32 bits versions ant\u00e9rieures \u00e0 10.0.14393.8330",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2008 pour syst\u00e8mes x64 Service Pack 2 versions ant\u00e9rieures \u00e0 6.0.6003.23471",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 Version 23H2 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.22631.5768",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2012 R2 (Server Core installation) versions ant\u00e9rieures \u00e0 6.3.9600.22725",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2022 (Server Core installation) versions ant\u00e9rieures \u00e0 10.0.20348.3989",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2008 R2 pour syst\u00e8mes x64 Service Pack 1 versions ant\u00e9rieures \u00e0 6.1.7601.27872",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2008 R2 pour syst\u00e8mes x64 Service Pack 1 (Server Core installation) versions ant\u00e9rieures \u00e0 6.1.7601.27872",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2025-50168",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50168"
},
{
"name": "CVE-2025-49751",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-49751"
},
{
"name": "CVE-2025-50153",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50153"
},
{
"name": "CVE-2025-50167",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50167"
},
{
"name": "CVE-2025-53156",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53156"
},
{
"name": "CVE-2025-53769",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53769"
},
{
"name": "CVE-2025-50161",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50161"
},
{
"name": "CVE-2025-53726",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53726"
},
{
"name": "CVE-2025-53719",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53719"
},
{
"name": "CVE-2025-53141",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53141"
},
{
"name": "CVE-2025-50166",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50166"
},
{
"name": "CVE-2025-49757",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-49757"
},
{
"name": "CVE-2025-50162",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50162"
},
{
"name": "CVE-2025-53153",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53153"
},
{
"name": "CVE-2025-53154",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53154"
},
{
"name": "CVE-2025-53136",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53136"
},
{
"name": "CVE-2025-53778",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53778"
},
{
"name": "CVE-2025-50159",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50159"
},
{
"name": "CVE-2025-53144",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53144"
},
{
"name": "CVE-2025-49761",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-49761"
},
{
"name": "CVE-2025-50169",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50169"
},
{
"name": "CVE-2025-50155",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50155"
},
{
"name": "CVE-2025-50171",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50171"
},
{
"name": "CVE-2025-53723",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53723"
},
{
"name": "CVE-2025-50164",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50164"
},
{
"name": "CVE-2025-53721",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53721"
},
{
"name": "CVE-2025-50157",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50157"
},
{
"name": "CVE-2025-53720",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53720"
},
{
"name": "CVE-2025-53142",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53142"
},
{
"name": "CVE-2025-53131",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53131"
},
{
"name": "CVE-2025-50160",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50160"
},
{
"name": "CVE-2025-53134",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53134"
},
{
"name": "CVE-2025-53152",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53152"
},
{
"name": "CVE-2025-53788",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53788"
},
{
"name": "CVE-2025-53779",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53779"
},
{
"name": "CVE-2025-53716",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53716"
},
{
"name": "CVE-2025-50154",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50154"
},
{
"name": "CVE-2025-53132",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53132"
},
{
"name": "CVE-2025-53133",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53133"
},
{
"name": "CVE-2025-50176",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50176"
},
{
"name": "CVE-2025-53722",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53722"
},
{
"name": "CVE-2025-53789",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53789"
},
{
"name": "CVE-2025-50172",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50172"
},
{
"name": "CVE-2025-49743",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-49743"
},
{
"name": "CVE-2025-50173",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50173"
},
{
"name": "CVE-2025-53718",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53718"
},
{
"name": "CVE-2025-48807",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-48807"
},
{
"name": "CVE-2025-53151",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53151"
},
{
"name": "CVE-2025-53148",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53148"
},
{
"name": "CVE-2025-50156",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50156"
},
{
"name": "CVE-2025-53155",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53155"
},
{
"name": "CVE-2025-53149",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53149"
},
{
"name": "CVE-2025-53135",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53135"
},
{
"name": "CVE-2025-53147",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53147"
},
{
"name": "CVE-2025-50170",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50170"
},
{
"name": "CVE-2025-53766",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53766"
},
{
"name": "CVE-2025-53138",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53138"
},
{
"name": "CVE-2025-53143",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53143"
},
{
"name": "CVE-2025-50177",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50177"
},
{
"name": "CVE-2025-49762",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-49762"
},
{
"name": "CVE-2025-53145",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53145"
},
{
"name": "CVE-2025-53725",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53725"
},
{
"name": "CVE-2025-53724",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53724"
},
{
"name": "CVE-2025-50158",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50158"
},
{
"name": "CVE-2025-50163",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50163"
},
{
"name": "CVE-2025-53137",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53137"
},
{
"name": "CVE-2025-50165",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50165"
},
{
"name": "CVE-2025-53140",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53140"
}
],
"links": [],
"reference": "CERTFR-2025-AVI-0687",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2025-08-13T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Microsoft Windows. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Microsoft Windows",
"vendor_advisories": [
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-50156",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50156"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53132",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53132"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53141",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53141"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-50155",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50155"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53154",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53154"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-49751",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49751"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-50171",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50171"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53142",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53142"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53778",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53778"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-50177",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50177"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53145",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53145"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53716",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53716"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53725",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53725"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53151",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53151"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53131",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53131"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53719",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53719"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-49743",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49743"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-50154",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50154"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-50164",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50164"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53144",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53144"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53722",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53722"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53155",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53155"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-50173",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50173"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53135",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53135"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-50170",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50170"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53134",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53134"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53779",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53779"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-50167",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50167"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53140",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53140"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-50161",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50161"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-49762",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49762"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53721",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53721"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-50165",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50165"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-50163",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50163"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-50157",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50157"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53718",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53718"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-50162",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50162"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53766",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53766"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53769",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53769"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53156",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53156"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53138",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53138"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53723",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53723"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53149",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53149"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53720",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53720"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-49761",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49761"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53724",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53724"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53788",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53788"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-50168",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50168"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-50166",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50166"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-50176",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50176"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-50159",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50159"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53136",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53136"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53148",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53148"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53137",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53137"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53726",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53726"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-50158",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50158"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-48807",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-48807"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53152",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53152"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-50160",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50160"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53147",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53147"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53133",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53133"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-50172",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50172"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53153",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53153"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-50169",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50169"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53789",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53789"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-50153",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50153"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-49757",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49757"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53143",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53143"
}
]
}
CERTFR-2025-AVI-0687
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans Microsoft Windows. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Microsoft | N/A | Windows Server 2025 (Server Core installation) versions antérieures à 10.0.26100.4851 | ||
| Microsoft | N/A | Windows 11 Version 22H2 pour systèmes ARM64 versions antérieures à 10.0.22621.5768 | ||
| Microsoft | N/A | Windows 11 Version 22H2 pour systèmes x64 versions antérieures à 10.0.22621.5768 | ||
| Microsoft | N/A | Windows 10 Version 1607 pour systèmes x64 versions antérieures à 10.0.14393.8330 | ||
| Microsoft | N/A | Windows 10 pour systèmes x64 versions antérieures à 10.0.10240.21100 | ||
| Microsoft | N/A | Windows 11 Version 24H2 pour systèmes x64 versions antérieures à 10.0.26100.4851 | ||
| Microsoft | N/A | Windows 10 Version 22H2 pour systèmes 32 bits versions antérieures à 10.0.19045.6216 | ||
| Microsoft | N/A | Windows Server 2025 versions antérieures à 10.0.26100.4851 | ||
| Microsoft | N/A | Windows Server 2012 versions antérieures à 6.2.9200.25622 | ||
| Microsoft | N/A | Windows 10 Version 22H2 pour systèmes ARM64 versions antérieures à 10.0.19045.6216 | ||
| Microsoft | N/A | Windows Server 2012 (Server Core installation) versions antérieures à 6.2.9200.25622 | ||
| Microsoft | N/A | Windows Server 2019 (Server Core installation) versions antérieures à 10.0.17763.7678 | ||
| Microsoft | N/A | Windows 10 Version 21H2 pour systèmes ARM64 versions antérieures à 10.0.19044.6216 | ||
| Microsoft | N/A | Windows Server 2016 (Server Core installation) versions antérieures à 10.0.14393.8330 | ||
| Microsoft | N/A | Windows 10 Version 21H2 pour systèmes x64 versions antérieures à 10.0.19044.6216 | ||
| Microsoft | N/A | Windows 10 Version 1809 pour systèmes x64 versions antérieures à 10.0.17763.7678 | ||
| Microsoft | N/A | Windows 10 Version 1809 pour systèmes 32 bits versions antérieures à 10.0.17763.7678 | ||
| Microsoft | N/A | Windows Server 2022, 23H2 Edition (Server Core installation) versions antérieures à 10.0.25398.1791 | ||
| Microsoft | N/A | Windows Server 2016 versions antérieures à 10.0.14393.8330 | ||
| Microsoft | N/A | Windows Server 2008 pour systèmes 32 bits Service Pack 2 versions antérieures à 6.0.6003.23471 | ||
| Microsoft | N/A | Windows Server 2019 versions antérieures à 10.0.17763.7678 | ||
| Microsoft | N/A | Windows Server 2008 pour systèmes 32 bits Service Pack 2 (Server Core installation) versions antérieures à 6.0.6003.23471 | ||
| Microsoft | N/A | Windows Subsystem pour Linux (WSL2) versions antérieures à 2.5.10 | ||
| Microsoft | N/A | Windows Server 2022 versions antérieures à 10.0.20348.3989 | ||
| Microsoft | N/A | Windows 10 Version 22H2 pour systèmes x64 versions antérieures à 10.0.19045.6216 | ||
| Microsoft | N/A | Windows Server 2008 pour systèmes x64 Service Pack 2 (Server Core installation) versions antérieures à 6.0.6003.23471 | ||
| Microsoft | N/A | Windows 11 Version 24H2 pour systèmes ARM64 versions antérieures à 10.0.26100.4851 | ||
| Microsoft | N/A | Windows Server 2008 R2 pour systèmes x64 Service Pack 1 (Server Core installation) versions antérieures à 6.1.7601.27820 | ||
| Microsoft | N/A | Windows 10 pour systèmes 32 bits versions antérieures à 10.0.10240.21100 | ||
| Microsoft | N/A | Windows 11 Version 23H2 pour systèmes ARM64 versions antérieures à 10.0.22631.5768 | ||
| Microsoft | N/A | Windows Server 2012 R2 versions antérieures à 6.3.9600.22725 | ||
| Microsoft | N/A | Windows 10 Version 21H2 pour systèmes 32 bits versions antérieures à 10.0.19044.6216 | ||
| Microsoft | N/A | Windows 10 Version 1607 pour systèmes 32 bits versions antérieures à 10.0.14393.8330 | ||
| Microsoft | N/A | Windows Server 2008 pour systèmes x64 Service Pack 2 versions antérieures à 6.0.6003.23471 | ||
| Microsoft | N/A | Windows 11 Version 23H2 pour systèmes x64 versions antérieures à 10.0.22631.5768 | ||
| Microsoft | N/A | Windows Server 2012 R2 (Server Core installation) versions antérieures à 6.3.9600.22725 | ||
| Microsoft | N/A | Windows Server 2022 (Server Core installation) versions antérieures à 10.0.20348.3989 | ||
| Microsoft | N/A | Windows Server 2008 R2 pour systèmes x64 Service Pack 1 versions antérieures à 6.1.7601.27872 | ||
| Microsoft | N/A | Windows Server 2008 R2 pour systèmes x64 Service Pack 1 (Server Core installation) versions antérieures à 6.1.7601.27872 |
References
| Title | Publication Time | Tags | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Windows Server 2025 (Server Core installation) versions ant\u00e9rieures \u00e0 10.0.26100.4851",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 Version 22H2 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.22621.5768",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 Version 22H2 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.22621.5768",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 1607 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.14393.8330",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.10240.21100",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 Version 24H2 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.26100.4851",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 22H2 pour syst\u00e8mes 32 bits versions ant\u00e9rieures \u00e0 10.0.19045.6216",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2025 versions ant\u00e9rieures \u00e0 10.0.26100.4851",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2012 versions ant\u00e9rieures \u00e0 6.2.9200.25622",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 22H2 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.19045.6216",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2012 (Server Core installation) versions ant\u00e9rieures \u00e0 6.2.9200.25622",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2019 (Server Core installation) versions ant\u00e9rieures \u00e0 10.0.17763.7678",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 21H2 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.19044.6216",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2016 (Server Core installation) versions ant\u00e9rieures \u00e0 10.0.14393.8330",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 21H2 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.19044.6216",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 1809 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.17763.7678",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 1809 pour syst\u00e8mes 32 bits versions ant\u00e9rieures \u00e0 10.0.17763.7678",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2022, 23H2 Edition (Server Core installation) versions ant\u00e9rieures \u00e0 10.0.25398.1791",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2016 versions ant\u00e9rieures \u00e0 10.0.14393.8330",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2008 pour syst\u00e8mes 32 bits Service Pack 2 versions ant\u00e9rieures \u00e0 6.0.6003.23471",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2019 versions ant\u00e9rieures \u00e0 10.0.17763.7678",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2008 pour syst\u00e8mes 32 bits Service Pack 2 (Server Core installation) versions ant\u00e9rieures \u00e0 6.0.6003.23471",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Subsystem pour Linux (WSL2) versions ant\u00e9rieures \u00e0 2.5.10",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2022 versions ant\u00e9rieures \u00e0 10.0.20348.3989",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 22H2 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.19045.6216",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2008 pour syst\u00e8mes x64 Service Pack 2 (Server Core installation) versions ant\u00e9rieures \u00e0 6.0.6003.23471",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 Version 24H2 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.26100.4851",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2008 R2 pour syst\u00e8mes x64 Service Pack 1 (Server Core installation) versions ant\u00e9rieures \u00e0 6.1.7601.27820",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 pour syst\u00e8mes 32 bits versions ant\u00e9rieures \u00e0 10.0.10240.21100",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 Version 23H2 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.22631.5768",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2012 R2 versions ant\u00e9rieures \u00e0 6.3.9600.22725",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 21H2 pour syst\u00e8mes 32 bits versions ant\u00e9rieures \u00e0 10.0.19044.6216",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 10 Version 1607 pour syst\u00e8mes 32 bits versions ant\u00e9rieures \u00e0 10.0.14393.8330",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2008 pour syst\u00e8mes x64 Service Pack 2 versions ant\u00e9rieures \u00e0 6.0.6003.23471",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows 11 Version 23H2 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.22631.5768",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2012 R2 (Server Core installation) versions ant\u00e9rieures \u00e0 6.3.9600.22725",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2022 (Server Core installation) versions ant\u00e9rieures \u00e0 10.0.20348.3989",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2008 R2 pour syst\u00e8mes x64 Service Pack 1 versions ant\u00e9rieures \u00e0 6.1.7601.27872",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Windows Server 2008 R2 pour syst\u00e8mes x64 Service Pack 1 (Server Core installation) versions ant\u00e9rieures \u00e0 6.1.7601.27872",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2025-50168",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50168"
},
{
"name": "CVE-2025-49751",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-49751"
},
{
"name": "CVE-2025-50153",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50153"
},
{
"name": "CVE-2025-50167",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50167"
},
{
"name": "CVE-2025-53156",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53156"
},
{
"name": "CVE-2025-53769",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53769"
},
{
"name": "CVE-2025-50161",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50161"
},
{
"name": "CVE-2025-53726",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53726"
},
{
"name": "CVE-2025-53719",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53719"
},
{
"name": "CVE-2025-53141",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53141"
},
{
"name": "CVE-2025-50166",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50166"
},
{
"name": "CVE-2025-49757",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-49757"
},
{
"name": "CVE-2025-50162",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50162"
},
{
"name": "CVE-2025-53153",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53153"
},
{
"name": "CVE-2025-53154",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53154"
},
{
"name": "CVE-2025-53136",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53136"
},
{
"name": "CVE-2025-53778",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53778"
},
{
"name": "CVE-2025-50159",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50159"
},
{
"name": "CVE-2025-53144",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53144"
},
{
"name": "CVE-2025-49761",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-49761"
},
{
"name": "CVE-2025-50169",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50169"
},
{
"name": "CVE-2025-50155",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50155"
},
{
"name": "CVE-2025-50171",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50171"
},
{
"name": "CVE-2025-53723",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53723"
},
{
"name": "CVE-2025-50164",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50164"
},
{
"name": "CVE-2025-53721",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53721"
},
{
"name": "CVE-2025-50157",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50157"
},
{
"name": "CVE-2025-53720",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53720"
},
{
"name": "CVE-2025-53142",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53142"
},
{
"name": "CVE-2025-53131",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53131"
},
{
"name": "CVE-2025-50160",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50160"
},
{
"name": "CVE-2025-53134",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53134"
},
{
"name": "CVE-2025-53152",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53152"
},
{
"name": "CVE-2025-53788",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53788"
},
{
"name": "CVE-2025-53779",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53779"
},
{
"name": "CVE-2025-53716",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53716"
},
{
"name": "CVE-2025-50154",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50154"
},
{
"name": "CVE-2025-53132",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53132"
},
{
"name": "CVE-2025-53133",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53133"
},
{
"name": "CVE-2025-50176",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50176"
},
{
"name": "CVE-2025-53722",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53722"
},
{
"name": "CVE-2025-53789",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53789"
},
{
"name": "CVE-2025-50172",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50172"
},
{
"name": "CVE-2025-49743",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-49743"
},
{
"name": "CVE-2025-50173",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50173"
},
{
"name": "CVE-2025-53718",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53718"
},
{
"name": "CVE-2025-48807",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-48807"
},
{
"name": "CVE-2025-53151",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53151"
},
{
"name": "CVE-2025-53148",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53148"
},
{
"name": "CVE-2025-50156",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50156"
},
{
"name": "CVE-2025-53155",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53155"
},
{
"name": "CVE-2025-53149",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53149"
},
{
"name": "CVE-2025-53135",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53135"
},
{
"name": "CVE-2025-53147",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53147"
},
{
"name": "CVE-2025-50170",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50170"
},
{
"name": "CVE-2025-53766",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53766"
},
{
"name": "CVE-2025-53138",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53138"
},
{
"name": "CVE-2025-53143",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53143"
},
{
"name": "CVE-2025-50177",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50177"
},
{
"name": "CVE-2025-49762",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-49762"
},
{
"name": "CVE-2025-53145",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53145"
},
{
"name": "CVE-2025-53725",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53725"
},
{
"name": "CVE-2025-53724",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53724"
},
{
"name": "CVE-2025-50158",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50158"
},
{
"name": "CVE-2025-50163",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50163"
},
{
"name": "CVE-2025-53137",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53137"
},
{
"name": "CVE-2025-50165",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50165"
},
{
"name": "CVE-2025-53140",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53140"
}
],
"links": [],
"reference": "CERTFR-2025-AVI-0687",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2025-08-13T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Microsoft Windows. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Microsoft Windows",
"vendor_advisories": [
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-50156",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50156"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53132",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53132"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53141",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53141"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-50155",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50155"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53154",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53154"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-49751",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49751"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-50171",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50171"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53142",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53142"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53778",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53778"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-50177",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50177"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53145",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53145"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53716",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53716"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53725",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53725"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53151",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53151"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53131",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53131"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53719",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53719"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-49743",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49743"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-50154",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50154"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-50164",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50164"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53144",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53144"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53722",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53722"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53155",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53155"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-50173",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50173"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53135",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53135"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-50170",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50170"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53134",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53134"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53779",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53779"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-50167",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50167"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53140",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53140"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-50161",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50161"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-49762",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49762"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53721",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53721"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-50165",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50165"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-50163",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50163"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-50157",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50157"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53718",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53718"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-50162",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50162"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53766",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53766"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53769",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53769"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53156",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53156"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53138",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53138"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53723",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53723"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53149",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53149"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53720",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53720"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-49761",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49761"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53724",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53724"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53788",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53788"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-50168",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50168"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-50166",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50166"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-50176",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50176"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-50159",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50159"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53136",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53136"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53148",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53148"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53137",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53137"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53726",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53726"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-50158",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50158"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-48807",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-48807"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53152",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53152"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-50160",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50160"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53147",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53147"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53133",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53133"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-50172",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50172"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53153",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53153"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-50169",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50169"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53789",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53789"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-50153",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50153"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-49757",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49757"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53143",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53143"
}
]
}
CERTFR-2025-AVI-0686
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans Microsoft Office. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance et une atteinte à la confidentialité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Microsoft | Office | Microsoft Office LTSC pour Mac 2021 versions antérieures à 16.100.25081015 | ||
| Microsoft | Office | Microsoft Word 2016 (édition 64 bits) versions antérieures à 16.0.5513.1000 | ||
| Microsoft | Office | Microsoft Office pour Android versions antérieures à 16.0.19127.20000 | ||
| Microsoft | Office | Microsoft Office LTSC 2024 sans les derniers correctifs de sécurité pour éditions 32 bits | ||
| Microsoft | Office | Microsoft Office 2019 sans les derniers correctifs de sécurité pour éditions 32 bits | ||
| Microsoft | Office | Microsoft Office 2016 (édition 64 bits) versions antérieures à 16.0.5513.1000 | ||
| Microsoft | Office | Microsoft Excel 2016 (édition 64 bits) versions antérieures à 16.0.5513.1000 | ||
| Microsoft | Office | Microsoft Office LTSC 2021 sans les derniers correctifs de sécurité pour éditions 64 bits | ||
| Microsoft | Office | Microsoft Office LTSC pour Mac 2024 versions antérieures à 16.100.25081015 | ||
| Microsoft | Office | Microsoft Office LTSC 2021 sans les derniers correctifs de sécurité pour éditions 32 bits | ||
| Microsoft | Office | Microsoft Office pour applications universelles versions antérieures à 16.0.14326.22618 | ||
| Microsoft | Office | Microsoft Office 2016 (édition 32 bits) versions antérieures à 16.0.5513.1000 | ||
| Microsoft | Office | Microsoft Word 2016 (édition 32 bits) versions antérieures à 16.0.5513.1000 | ||
| Microsoft | Office | Microsoft Office 2019 sans les derniers correctifs de sécurité pour éditions 64 bits | ||
| Microsoft | Office | Microsoft 365 Apps pour Enterprise sans les derniers correctifs de sécurité pour systèmes 32 bits | ||
| Microsoft | Office | Microsoft Excel 2016 (édition 32 bits) versions antérieures à 16.0.5513.1000 | ||
| Microsoft | Office | Office Online Server versions antérieures à 16.0.10417.20034 | ||
| Microsoft | Office | Microsoft PowerPoint 2016 (édition 32 bits) versions antérieures à 16.0.5513.1000 | ||
| Microsoft | Office | Microsoft 365 Apps pour Enterprise sans les derniers correctifs de sécurité pour systèmes 64 bits | ||
| Microsoft | Office | Microsoft Office LTSC 2024 sans les derniers correctifs de sécurité pour éditions 64 bits | ||
| Microsoft | Office | Microsoft PowerPoint 2016 (édition 64 bits) versions antérieures à 16.0.5513.1000 |
References
| Title | Publication Time | Tags | ||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||||||||||||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Microsoft Office LTSC pour Mac 2021 versions ant\u00e9rieures \u00e0 16.100.25081015",
"product": {
"name": "Office",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Word 2016 (\u00e9dition 64 bits) versions ant\u00e9rieures \u00e0 16.0.5513.1000",
"product": {
"name": "Office",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Office pour Android versions ant\u00e9rieures \u00e0 16.0.19127.20000",
"product": {
"name": "Office",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Office LTSC 2024 sans les derniers correctifs de s\u00e9curit\u00e9 pour \u00e9ditions 32 bits",
"product": {
"name": "Office",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Office 2019 sans les derniers correctifs de s\u00e9curit\u00e9 pour \u00e9ditions 32 bits ",
"product": {
"name": "Office",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Office 2016 (\u00e9dition 64 bits) versions ant\u00e9rieures \u00e0 16.0.5513.1000",
"product": {
"name": "Office",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Excel 2016 (\u00e9dition 64 bits) versions ant\u00e9rieures \u00e0 16.0.5513.1000",
"product": {
"name": "Office",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Office LTSC 2021 sans les derniers correctifs de s\u00e9curit\u00e9 pour \u00e9ditions 64 bits",
"product": {
"name": "Office",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Office LTSC pour Mac 2024 versions ant\u00e9rieures \u00e0 16.100.25081015",
"product": {
"name": "Office",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Office LTSC 2021 sans les derniers correctifs de s\u00e9curit\u00e9 pour \u00e9ditions 32 bits",
"product": {
"name": "Office",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Office pour applications universelles versions ant\u00e9rieures \u00e0 16.0.14326.22618",
"product": {
"name": "Office",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Office 2016 (\u00e9dition 32 bits) versions ant\u00e9rieures \u00e0 16.0.5513.1000",
"product": {
"name": "Office",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Word 2016 (\u00e9dition 32 bits) versions ant\u00e9rieures \u00e0 16.0.5513.1000",
"product": {
"name": "Office",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Office 2019 sans les derniers correctifs de s\u00e9curit\u00e9 pour \u00e9ditions 64 bits",
"product": {
"name": "Office",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft 365 Apps pour Enterprise sans les derniers correctifs de s\u00e9curit\u00e9 pour syst\u00e8mes 32 bits ",
"product": {
"name": "Office",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Excel 2016 (\u00e9dition 32 bits) versions ant\u00e9rieures \u00e0 16.0.5513.1000",
"product": {
"name": "Office",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Office Online Server versions ant\u00e9rieures \u00e0 16.0.10417.20034",
"product": {
"name": "Office",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft PowerPoint 2016 (\u00e9dition 32 bits) versions ant\u00e9rieures \u00e0 16.0.5513.1000",
"product": {
"name": "Office",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft 365 Apps pour Enterprise sans les derniers correctifs de s\u00e9curit\u00e9 pour syst\u00e8mes 64 bits",
"product": {
"name": "Office",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Office LTSC 2024 sans les derniers correctifs de s\u00e9curit\u00e9 pour \u00e9ditions 64 bits",
"product": {
"name": "Office",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft PowerPoint 2016 (\u00e9dition 64 bits) versions ant\u00e9rieures \u00e0 16.0.5513.1000",
"product": {
"name": "Office",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2025-53740",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53740"
},
{
"name": "CVE-2025-53759",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53759"
},
{
"name": "CVE-2025-53735",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53735"
},
{
"name": "CVE-2025-53736",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53736"
},
{
"name": "CVE-2025-53739",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53739"
},
{
"name": "CVE-2025-53741",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53741"
},
{
"name": "CVE-2025-53731",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53731"
},
{
"name": "CVE-2025-53784",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53784"
},
{
"name": "CVE-2025-53737",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53737"
},
{
"name": "CVE-2025-53733",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53733"
},
{
"name": "CVE-2025-53761",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53761"
},
{
"name": "CVE-2025-53738",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53738"
},
{
"name": "CVE-2025-53734",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53734"
},
{
"name": "CVE-2025-53766",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53766"
},
{
"name": "CVE-2025-53732",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53732"
},
{
"name": "CVE-2025-53730",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53730"
}
],
"links": [],
"reference": "CERTFR-2025-AVI-0686",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2025-08-13T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Microsoft Office. Elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Microsoft Office",
"vendor_advisories": [
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Office CVE-2025-53736",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53736"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Office CVE-2025-53734",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53734"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Office CVE-2025-53732",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53732"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Office CVE-2025-53759",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53759"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Office CVE-2025-53761",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53761"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Office CVE-2025-53733",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53733"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Office CVE-2025-53739",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53739"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Office CVE-2025-53741",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53741"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Office CVE-2025-53730",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53730"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Office CVE-2025-53784",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53784"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Office CVE-2025-53766",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53766"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Office CVE-2025-53731",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53731"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Office CVE-2025-53737",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53737"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Office CVE-2025-53740",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53740"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Office CVE-2025-53735",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53735"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Office CVE-2025-53738",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53738"
}
]
}
CERTFR-2025-AVI-0686
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans Microsoft Office. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance et une atteinte à la confidentialité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Microsoft | Office | Microsoft Office LTSC pour Mac 2021 versions antérieures à 16.100.25081015 | ||
| Microsoft | Office | Microsoft Word 2016 (édition 64 bits) versions antérieures à 16.0.5513.1000 | ||
| Microsoft | Office | Microsoft Office pour Android versions antérieures à 16.0.19127.20000 | ||
| Microsoft | Office | Microsoft Office LTSC 2024 sans les derniers correctifs de sécurité pour éditions 32 bits | ||
| Microsoft | Office | Microsoft Office 2019 sans les derniers correctifs de sécurité pour éditions 32 bits | ||
| Microsoft | Office | Microsoft Office 2016 (édition 64 bits) versions antérieures à 16.0.5513.1000 | ||
| Microsoft | Office | Microsoft Excel 2016 (édition 64 bits) versions antérieures à 16.0.5513.1000 | ||
| Microsoft | Office | Microsoft Office LTSC 2021 sans les derniers correctifs de sécurité pour éditions 64 bits | ||
| Microsoft | Office | Microsoft Office LTSC pour Mac 2024 versions antérieures à 16.100.25081015 | ||
| Microsoft | Office | Microsoft Office LTSC 2021 sans les derniers correctifs de sécurité pour éditions 32 bits | ||
| Microsoft | Office | Microsoft Office pour applications universelles versions antérieures à 16.0.14326.22618 | ||
| Microsoft | Office | Microsoft Office 2016 (édition 32 bits) versions antérieures à 16.0.5513.1000 | ||
| Microsoft | Office | Microsoft Word 2016 (édition 32 bits) versions antérieures à 16.0.5513.1000 | ||
| Microsoft | Office | Microsoft Office 2019 sans les derniers correctifs de sécurité pour éditions 64 bits | ||
| Microsoft | Office | Microsoft 365 Apps pour Enterprise sans les derniers correctifs de sécurité pour systèmes 32 bits | ||
| Microsoft | Office | Microsoft Excel 2016 (édition 32 bits) versions antérieures à 16.0.5513.1000 | ||
| Microsoft | Office | Office Online Server versions antérieures à 16.0.10417.20034 | ||
| Microsoft | Office | Microsoft PowerPoint 2016 (édition 32 bits) versions antérieures à 16.0.5513.1000 | ||
| Microsoft | Office | Microsoft 365 Apps pour Enterprise sans les derniers correctifs de sécurité pour systèmes 64 bits | ||
| Microsoft | Office | Microsoft Office LTSC 2024 sans les derniers correctifs de sécurité pour éditions 64 bits | ||
| Microsoft | Office | Microsoft PowerPoint 2016 (édition 64 bits) versions antérieures à 16.0.5513.1000 |
References
| Title | Publication Time | Tags | ||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||||||||||||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Microsoft Office LTSC pour Mac 2021 versions ant\u00e9rieures \u00e0 16.100.25081015",
"product": {
"name": "Office",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Word 2016 (\u00e9dition 64 bits) versions ant\u00e9rieures \u00e0 16.0.5513.1000",
"product": {
"name": "Office",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Office pour Android versions ant\u00e9rieures \u00e0 16.0.19127.20000",
"product": {
"name": "Office",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Office LTSC 2024 sans les derniers correctifs de s\u00e9curit\u00e9 pour \u00e9ditions 32 bits",
"product": {
"name": "Office",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Office 2019 sans les derniers correctifs de s\u00e9curit\u00e9 pour \u00e9ditions 32 bits ",
"product": {
"name": "Office",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Office 2016 (\u00e9dition 64 bits) versions ant\u00e9rieures \u00e0 16.0.5513.1000",
"product": {
"name": "Office",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Excel 2016 (\u00e9dition 64 bits) versions ant\u00e9rieures \u00e0 16.0.5513.1000",
"product": {
"name": "Office",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Office LTSC 2021 sans les derniers correctifs de s\u00e9curit\u00e9 pour \u00e9ditions 64 bits",
"product": {
"name": "Office",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Office LTSC pour Mac 2024 versions ant\u00e9rieures \u00e0 16.100.25081015",
"product": {
"name": "Office",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Office LTSC 2021 sans les derniers correctifs de s\u00e9curit\u00e9 pour \u00e9ditions 32 bits",
"product": {
"name": "Office",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Office pour applications universelles versions ant\u00e9rieures \u00e0 16.0.14326.22618",
"product": {
"name": "Office",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Office 2016 (\u00e9dition 32 bits) versions ant\u00e9rieures \u00e0 16.0.5513.1000",
"product": {
"name": "Office",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Word 2016 (\u00e9dition 32 bits) versions ant\u00e9rieures \u00e0 16.0.5513.1000",
"product": {
"name": "Office",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Office 2019 sans les derniers correctifs de s\u00e9curit\u00e9 pour \u00e9ditions 64 bits",
"product": {
"name": "Office",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft 365 Apps pour Enterprise sans les derniers correctifs de s\u00e9curit\u00e9 pour syst\u00e8mes 32 bits ",
"product": {
"name": "Office",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Excel 2016 (\u00e9dition 32 bits) versions ant\u00e9rieures \u00e0 16.0.5513.1000",
"product": {
"name": "Office",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Office Online Server versions ant\u00e9rieures \u00e0 16.0.10417.20034",
"product": {
"name": "Office",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft PowerPoint 2016 (\u00e9dition 32 bits) versions ant\u00e9rieures \u00e0 16.0.5513.1000",
"product": {
"name": "Office",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft 365 Apps pour Enterprise sans les derniers correctifs de s\u00e9curit\u00e9 pour syst\u00e8mes 64 bits",
"product": {
"name": "Office",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Office LTSC 2024 sans les derniers correctifs de s\u00e9curit\u00e9 pour \u00e9ditions 64 bits",
"product": {
"name": "Office",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft PowerPoint 2016 (\u00e9dition 64 bits) versions ant\u00e9rieures \u00e0 16.0.5513.1000",
"product": {
"name": "Office",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2025-53740",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53740"
},
{
"name": "CVE-2025-53759",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53759"
},
{
"name": "CVE-2025-53735",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53735"
},
{
"name": "CVE-2025-53736",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53736"
},
{
"name": "CVE-2025-53739",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53739"
},
{
"name": "CVE-2025-53741",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53741"
},
{
"name": "CVE-2025-53731",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53731"
},
{
"name": "CVE-2025-53784",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53784"
},
{
"name": "CVE-2025-53737",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53737"
},
{
"name": "CVE-2025-53733",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53733"
},
{
"name": "CVE-2025-53761",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53761"
},
{
"name": "CVE-2025-53738",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53738"
},
{
"name": "CVE-2025-53734",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53734"
},
{
"name": "CVE-2025-53766",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53766"
},
{
"name": "CVE-2025-53732",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53732"
},
{
"name": "CVE-2025-53730",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53730"
}
],
"links": [],
"reference": "CERTFR-2025-AVI-0686",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2025-08-13T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Microsoft Office. Elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Microsoft Office",
"vendor_advisories": [
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Office CVE-2025-53736",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53736"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Office CVE-2025-53734",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53734"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Office CVE-2025-53732",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53732"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Office CVE-2025-53759",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53759"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Office CVE-2025-53761",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53761"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Office CVE-2025-53733",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53733"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Office CVE-2025-53739",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53739"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Office CVE-2025-53741",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53741"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Office CVE-2025-53730",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53730"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Office CVE-2025-53784",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53784"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Office CVE-2025-53766",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53766"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Office CVE-2025-53731",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53731"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Office CVE-2025-53737",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53737"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Office CVE-2025-53740",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53740"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Office CVE-2025-53735",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53735"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Office CVE-2025-53738",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53738"
}
]
}
WID-SEC-W-2025-1790
Vulnerability from csaf_certbund - Published: 2025-08-12 22:00 - Updated: 2025-09-18 22:00Summary
Microsoft Windows und Windows Server: Mehrere Schwachstellen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
Windows ist ein Betriebssystem von Microsoft.
Angriff
Ein Angreifer kann mehrere Schwachstellen in Microsoft Windows und Windows Server ausnutzen, um beliebigen Programmcode auszuführen, um seine Privilegien zu erhöhen, um Informationen offenzulegen, und um einen Denial of Service Angriff durchzuführen.
Betroffene Betriebssysteme
- Windows
{
"document": {
"aggregate_severity": {
"text": "hoch"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Windows ist ein Betriebssystem von Microsoft.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein Angreifer kann mehrere Schwachstellen in Microsoft Windows und Windows Server ausnutzen, um beliebigen Programmcode auszuf\u00fchren, um seine Privilegien zu erh\u00f6hen, um Informationen offenzulegen, und um einen Denial of Service Angriff durchzuf\u00fchren.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Windows",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2025-1790 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1790.json"
},
{
"category": "self",
"summary": "WID-SEC-2025-1790 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1790"
},
{
"category": "external",
"summary": "Microsoft Leitfaden f\u00fcr Sicherheitsupdates",
"url": "https://msrc.microsoft.com/update-guide/"
},
{
"category": "external",
"summary": "Exploit-DB # 52415 - PoC CVE-2025-50154 vom 2025-08-18",
"url": "https://www.exploit-db.com/exploits/52415"
},
{
"category": "external",
"summary": "Hitachi Vulnerability Information HITACHI-SEC-2025-309 vom 2025-09-19",
"url": "https://www.hitachi.com/products/it/storage-solutions/sec_info/2025/08.html"
}
],
"source_lang": "en-US",
"title": "Microsoft Windows und Windows Server: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2025-09-18T22:00:00.000+00:00",
"generator": {
"date": "2025-09-19T04:52:19.783+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.4.0"
}
},
"id": "WID-SEC-W-2025-1790",
"initial_release_date": "2025-08-12T22:00:00.000+00:00",
"revision_history": [
{
"date": "2025-08-12T22:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2025-08-18T22:00:00.000+00:00",
"number": "2",
"summary": "PoC f\u00fcr CVE-2025-50154 aufgenommen"
},
{
"date": "2025-09-18T22:00:00.000+00:00",
"number": "3",
"summary": "Neue Updates von HITACHI aufgenommen"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "5100",
"product": {
"name": "Hitachi Virtual Storage Platform 5100",
"product_id": "T017180",
"product_identification_helper": {
"cpe": "cpe:/h:hitachi:virtual_storage_platform:5100"
}
}
},
{
"category": "product_version",
"name": "5500",
"product": {
"name": "Hitachi Virtual Storage Platform 5500",
"product_id": "T017181",
"product_identification_helper": {
"cpe": "cpe:/h:hitachi:virtual_storage_platform:5500"
}
}
},
{
"category": "product_version",
"name": "5100H",
"product": {
"name": "Hitachi Virtual Storage Platform 5100H",
"product_id": "T017182",
"product_identification_helper": {
"cpe": "cpe:/h:hitachi:virtual_storage_platform:5100h"
}
}
},
{
"category": "product_version",
"name": "5500H",
"product": {
"name": "Hitachi Virtual Storage Platform 5500H",
"product_id": "T017183",
"product_identification_helper": {
"cpe": "cpe:/h:hitachi:virtual_storage_platform:5500h"
}
}
},
{
"category": "product_version",
"name": "G1000",
"product": {
"name": "Hitachi Virtual Storage Platform G1000",
"product_id": "T017184",
"product_identification_helper": {
"cpe": "cpe:/h:hitachi:virtual_storage_platform:g1000"
}
}
},
{
"category": "product_version",
"name": "G1500",
"product": {
"name": "Hitachi Virtual Storage Platform G1500",
"product_id": "T017185",
"product_identification_helper": {
"cpe": "cpe:/h:hitachi:virtual_storage_platform:g1500"
}
}
},
{
"category": "product_version",
"name": "F1500",
"product": {
"name": "Hitachi Virtual Storage Platform F1500",
"product_id": "T017186",
"product_identification_helper": {
"cpe": "cpe:/h:hitachi:virtual_storage_platform:f1500"
}
}
},
{
"category": "product_version",
"name": "VX7",
"product": {
"name": "Hitachi Virtual Storage Platform VX7",
"product_id": "T017187",
"product_identification_helper": {
"cpe": "cpe:/h:hitachi:virtual_storage_platform:vx7"
}
}
},
{
"category": "product_version",
"name": "5200",
"product": {
"name": "Hitachi Virtual Storage Platform 5200",
"product_id": "T047075",
"product_identification_helper": {
"cpe": "cpe:/h:hitachi:virtual_storage_platform:5200"
}
}
},
{
"category": "product_version",
"name": "5200H",
"product": {
"name": "Hitachi Virtual Storage Platform 5200H",
"product_id": "T047076",
"product_identification_helper": {
"cpe": "cpe:/h:hitachi:virtual_storage_platform:5200h"
}
}
},
{
"category": "product_version",
"name": "5600",
"product": {
"name": "Hitachi Virtual Storage Platform 5600",
"product_id": "T047077",
"product_identification_helper": {
"cpe": "cpe:/h:hitachi:virtual_storage_platform:5600"
}
}
},
{
"category": "product_version",
"name": "5600H",
"product": {
"name": "Hitachi Virtual Storage Platform 5600H",
"product_id": "T047078",
"product_identification_helper": {
"cpe": "cpe:/h:hitachi:virtual_storage_platform:5600h"
}
}
}
],
"category": "product_name",
"name": "Virtual Storage Platform"
}
],
"category": "vendor",
"name": "Hitachi"
},
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "Security App",
"product": {
"name": "Microsoft Windows Security App",
"product_id": "T046042",
"product_identification_helper": {
"cpe": "cpe:/o:microsoft:windows:security_app"
}
}
}
],
"category": "product_name",
"name": "Windows"
},
{
"branches": [
{
"category": "product_name",
"name": "Microsoft Windows 10",
"product": {
"name": "Microsoft Windows 10",
"product_id": "T042599",
"product_identification_helper": {
"cpe": "cpe:/o:microsoft:windows_10:-"
}
}
},
{
"category": "product_version",
"name": "Version 1607",
"product": {
"name": "Microsoft Windows 10 Version 1607",
"product_id": "T042601",
"product_identification_helper": {
"cpe": "cpe:/o:microsoft:windows_10:version_1607"
}
}
},
{
"category": "product_version",
"name": "Version 1809",
"product": {
"name": "Microsoft Windows 10 Version 1809",
"product_id": "T042602",
"product_identification_helper": {
"cpe": "cpe:/o:microsoft:windows_10:version_1809"
}
}
},
{
"category": "product_version",
"name": "Version 21H2",
"product": {
"name": "Microsoft Windows 10 Version 21H2",
"product_id": "T042606",
"product_identification_helper": {
"cpe": "cpe:/o:microsoft:windows_10:version_21h2"
}
}
},
{
"category": "product_version",
"name": "Version 22H2",
"product": {
"name": "Microsoft Windows 10 Version 22H2",
"product_id": "T042608",
"product_identification_helper": {
"cpe": "cpe:/o:microsoft:windows_10:version_22h2"
}
}
}
],
"category": "product_name",
"name": "Windows 10"
},
{
"branches": [
{
"category": "product_version",
"name": "Version 22H2",
"product": {
"name": "Microsoft Windows 11 Version 22H2",
"product_id": "T042607",
"product_identification_helper": {
"cpe": "cpe:/o:microsoft:windows_11:version_22h2"
}
}
},
{
"category": "product_version",
"name": "Version 23H2",
"product": {
"name": "Microsoft Windows 11 Version 23H2",
"product_id": "T042609",
"product_identification_helper": {
"cpe": "cpe:/o:microsoft:windows_11:version_23h2"
}
}
},
{
"category": "product_version",
"name": "Version 24H2",
"product": {
"name": "Microsoft Windows 11 Version 24H2",
"product_id": "T042611",
"product_identification_helper": {
"cpe": "cpe:/o:microsoft:windows_11:version_24h2"
}
}
}
],
"category": "product_name",
"name": "Windows 11"
},
{
"branches": [
{
"category": "product_version",
"name": "2008 SP2",
"product": {
"name": "Microsoft Windows Server 2008 SP2",
"product_id": "T042596",
"product_identification_helper": {
"cpe": "cpe:/o:microsoft:windows_server:2008_sp2"
}
}
},
{
"category": "product_version",
"name": "2008 R2 SP1",
"product": {
"name": "Microsoft Windows Server 2008 R2 SP1",
"product_id": "T045208",
"product_identification_helper": {
"cpe": "cpe:/o:microsoft:windows_server:2008_r2_sp1"
}
}
}
],
"category": "product_name",
"name": "Windows Server"
},
{
"category": "product_name",
"name": "Microsoft Windows Server 2012",
"product": {
"name": "Microsoft Windows Server 2012",
"product_id": "T043730",
"product_identification_helper": {
"cpe": "cpe:/o:microsoft:windows_server_2012:-"
}
}
},
{
"category": "product_name",
"name": "Microsoft Windows Server 2012 R2",
"product": {
"name": "Microsoft Windows Server 2012 R2",
"product_id": "T043731",
"product_identification_helper": {
"cpe": "cpe:/o:microsoft:windows_server_2012_r2:-"
}
}
},
{
"category": "product_name",
"name": "Microsoft Windows Server 2016",
"product": {
"name": "Microsoft Windows Server 2016",
"product_id": "T042600",
"product_identification_helper": {
"cpe": "cpe:/o:microsoft:windows_server_2016:-"
}
}
},
{
"category": "product_name",
"name": "Microsoft Windows Server 2019",
"product": {
"name": "Microsoft Windows Server 2019",
"product_id": "T042603",
"product_identification_helper": {
"cpe": "cpe:/o:microsoft:windows_server_2019:-"
}
}
},
{
"branches": [
{
"category": "product_name",
"name": "Microsoft Windows Server 2022",
"product": {
"name": "Microsoft Windows Server 2022",
"product_id": "T041082",
"product_identification_helper": {
"cpe": "cpe:/o:microsoft:windows_server_2022:-"
}
}
},
{
"category": "product_version",
"name": "23H2 Edition",
"product": {
"name": "Microsoft Windows Server 2022 23H2 Edition",
"product_id": "T042610",
"product_identification_helper": {
"cpe": "cpe:/o:microsoft:windows_server_2022:23h2_edition"
}
}
}
],
"category": "product_name",
"name": "Windows Server 2022"
},
{
"category": "product_name",
"name": "Microsoft Windows Server 2025",
"product": {
"name": "Microsoft Windows Server 2025",
"product_id": "T045209",
"product_identification_helper": {
"cpe": "cpe:/o:microsoft:windows_server_2025:-"
}
}
}
],
"category": "vendor",
"name": "Microsoft"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-48807",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-48807"
},
{
"cve": "CVE-2025-49743",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-49743"
},
{
"cve": "CVE-2025-49751",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-49751"
},
{
"cve": "CVE-2025-49757",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-49757"
},
{
"cve": "CVE-2025-49761",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-49761"
},
{
"cve": "CVE-2025-49762",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-49762"
},
{
"cve": "CVE-2025-50153",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-50153"
},
{
"cve": "CVE-2025-50154",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-50154"
},
{
"cve": "CVE-2025-50155",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-50155"
},
{
"cve": "CVE-2025-50156",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-50156"
},
{
"cve": "CVE-2025-50157",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-50157"
},
{
"cve": "CVE-2025-50158",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-50158"
},
{
"cve": "CVE-2025-50159",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-50159"
},
{
"cve": "CVE-2025-50160",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-50160"
},
{
"cve": "CVE-2025-50161",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-50161"
},
{
"cve": "CVE-2025-50162",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-50162"
},
{
"cve": "CVE-2025-50163",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-50163"
},
{
"cve": "CVE-2025-50164",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-50164"
},
{
"cve": "CVE-2025-50165",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-50165"
},
{
"cve": "CVE-2025-50166",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-50166"
},
{
"cve": "CVE-2025-50167",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-50167"
},
{
"cve": "CVE-2025-50168",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-50168"
},
{
"cve": "CVE-2025-50169",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-50169"
},
{
"cve": "CVE-2025-50170",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-50170"
},
{
"cve": "CVE-2025-50171",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-50171"
},
{
"cve": "CVE-2025-50172",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-50172"
},
{
"cve": "CVE-2025-50173",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-50173"
},
{
"cve": "CVE-2025-50176",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-50176"
},
{
"cve": "CVE-2025-50177",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-50177"
},
{
"cve": "CVE-2025-53131",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-53131"
},
{
"cve": "CVE-2025-53132",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-53132"
},
{
"cve": "CVE-2025-53133",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-53133"
},
{
"cve": "CVE-2025-53134",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-53134"
},
{
"cve": "CVE-2025-53135",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-53135"
},
{
"cve": "CVE-2025-53136",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-53136"
},
{
"cve": "CVE-2025-53137",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-53137"
},
{
"cve": "CVE-2025-53138",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-53138"
},
{
"cve": "CVE-2025-53140",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-53140"
},
{
"cve": "CVE-2025-53141",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-53141"
},
{
"cve": "CVE-2025-53142",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-53142"
},
{
"cve": "CVE-2025-53143",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-53143"
},
{
"cve": "CVE-2025-53144",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-53144"
},
{
"cve": "CVE-2025-53145",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-53145"
},
{
"cve": "CVE-2025-53147",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-53147"
},
{
"cve": "CVE-2025-53148",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-53148"
},
{
"cve": "CVE-2025-53149",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-53149"
},
{
"cve": "CVE-2025-53151",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-53151"
},
{
"cve": "CVE-2025-53152",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-53152"
},
{
"cve": "CVE-2025-53153",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-53153"
},
{
"cve": "CVE-2025-53154",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-53154"
},
{
"cve": "CVE-2025-53155",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-53155"
},
{
"cve": "CVE-2025-53156",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-53156"
},
{
"cve": "CVE-2025-53716",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-53716"
},
{
"cve": "CVE-2025-53718",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-53718"
},
{
"cve": "CVE-2025-53719",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-53719"
},
{
"cve": "CVE-2025-53720",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-53720"
},
{
"cve": "CVE-2025-53721",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-53721"
},
{
"cve": "CVE-2025-53722",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-53722"
},
{
"cve": "CVE-2025-53723",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-53723"
},
{
"cve": "CVE-2025-53724",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-53724"
},
{
"cve": "CVE-2025-53725",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-53725"
},
{
"cve": "CVE-2025-53726",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-53726"
},
{
"cve": "CVE-2025-53766",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-53766"
},
{
"cve": "CVE-2025-53769",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-53769"
},
{
"cve": "CVE-2025-53778",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-53778"
},
{
"cve": "CVE-2025-53779",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-53779"
},
{
"cve": "CVE-2025-53789",
"product_status": {
"known_affected": [
"T042606",
"T042607",
"T042608",
"T042609",
"T042596",
"T042599",
"T042610",
"T042611",
"T045208",
"T041082",
"T045209",
"T047075",
"T017180",
"T017181",
"T017182",
"T017183",
"T017184",
"T017185",
"T017186",
"T017187",
"T043730",
"T043731",
"T042600",
"T042601",
"T042602",
"T042603",
"T047078",
"T046042",
"T047076",
"T047077"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-53789"
}
]
}
GHSA-V6M7-JPJM-GVWJ
Vulnerability from github – Published: 2025-08-12 18:31 – Updated: 2025-08-12 18:31
VLAI?
Details
Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.
Severity ?
9.8 (Critical)
{
"affected": [],
"aliases": [
"CVE-2025-53766"
],
"database_specific": {
"cwe_ids": [
"CWE-122"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-08-12T18:15:45Z",
"severity": "CRITICAL"
},
"details": "Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.",
"id": "GHSA-v6m7-jpjm-gvwj",
"modified": "2025-08-12T18:31:33Z",
"published": "2025-08-12T18:31:33Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-53766"
},
{
"type": "WEB",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53766"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…