cvelistv5 - CVE-2025-30388

CVE-2025-30388 (GCVE-0-2025-30388)

Vulnerability from cvelistv5

Published

2025-05-13 16:59

Modified

2025-09-10 00:09

Severity ?

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

CWE

CWE-122 - Heap-based Buffer Overflow

Summary

Heap-based buffer overflow in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.

References

URL

Tags

secure@microsoft.com

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30388

Vendor Advisory

Impacted products

Vendor

Product

Version

Microsoft

Microsoft Office LTSC for Mac 2021

Version: 16.0.1 < 16.97.25042725

Microsoft	Microsoft Office for Android	Version: 16.0.1 < 16.0.18827.20000
Microsoft	Microsoft Office for Universal	Version: 16.0.1 < 16.0.14326.22502
Microsoft	Microsoft Office LTSC for Mac 2024	Version: 1.0.0 < 16.97.25042725
Microsoft	Windows 10 Version 1809	Version: 10.0.17763.0 < 10.0.17763.7314
Microsoft	Windows Server 2019	Version: 10.0.17763.0 < 10.0.17763.7314
Microsoft	Windows Server 2019 (Server Core installation)	Version: 10.0.17763.0 < 10.0.17763.7314
Microsoft	Windows Server 2022	Version: 10.0.20348.0 < 10.0.20348.3692
Microsoft	Windows 10 Version 21H2	Version: 10.0.19044.0 < 10.0.19044.5854
Microsoft	Windows 11 version 22H2	Version: 10.0.22621.0 < 10.0.22621.5335
Microsoft	Windows 10 Version 22H2	Version: 10.0.19045.0 < 10.0.19045.5854
Microsoft	Windows Server 2025 (Server Core installation)	Version: 10.0.26100.0 < 10.0.26100.4061
Microsoft	Windows 11 version 22H3	Version: 10.0.22631.0 < 10.0.22631.5335
Microsoft	Windows 11 Version 23H2	Version: 10.0.22631.0 < 10.0.22631.5335
Microsoft	Windows Server 2022, 23H2 Edition (Server Core installation)	Version: 10.0.25398.0 < 10.0.25398.1611
Microsoft	Windows 11 Version 24H2	Version: 10.0.26100.0 < 10.0.26100.4061
Microsoft	Windows Server 2025	Version: 10.0.26100.0 < 10.0.26100.4061
Microsoft	Windows 10 Version 1507	Version: 10.0.10240.0 < 10.0.10240.21014
Microsoft	Windows 10 Version 1607	Version: 10.0.14393.0 < 10.0.14393.8066
Microsoft	Windows Server 2016	Version: 10.0.14393.0 < 10.0.14393.8066
Microsoft	Windows Server 2016 (Server Core installation)	Version: 10.0.14393.0 < 10.0.14393.8066
Microsoft	Windows Server 2008 Service Pack 2	Version: 6.0.6003.0 < 6.0.6003.23279
Microsoft	Windows Server 2008 Service Pack 2 (Server Core installation)	Version: 6.0.6003.0 < 6.0.6003.23279
Microsoft	Windows Server 2008 Service Pack 2	Version: 6.0.6003.0 < 6.0.6003.23279
Microsoft	Windows Server 2008 R2 Service Pack 1	Version: 6.1.7601.0 < 6.1.7601.27729
Microsoft	Windows Server 2008 R2 Service Pack 1 (Server Core installation)	Version: 6.1.7601.0 < 6.1.7601.27729
Microsoft	Windows Server 2012	Version: 6.2.9200.0 < 6.2.9200.25475
Microsoft	Windows Server 2012 (Server Core installation)	Version: 6.2.9200.0 < 6.2.9200.25475
Microsoft	Windows Server 2012 R2	Version: 6.3.9600.0 < 6.3.9600.22577
Microsoft	Windows Server 2012 R2 (Server Core installation)	Version: 6.3.9600.0 < 6.3.9600.22577

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-30388",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-05-08T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-14T04:00:39.028Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Microsoft Office LTSC for Mac 2021",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "16.97.25042725",
              "status": "affected",
              "version": "16.0.1",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Microsoft Office for Android",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "16.0.18827.20000",
              "status": "affected",
              "version": "16.0.1",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Microsoft Office for Universal",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "16.0.14326.22502",
              "status": "affected",
              "version": "16.0.1",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Microsoft Office LTSC for Mac 2024",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "16.97.25042725",
              "status": "affected",
              "version": "1.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 1809",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.17763.7314",
              "status": "affected",
              "version": "10.0.17763.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2019",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.17763.7314",
              "status": "affected",
              "version": "10.0.17763.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2019 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.17763.7314",
              "status": "affected",
              "version": "10.0.17763.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2022",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.20348.3692",
              "status": "affected",
              "version": "10.0.20348.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "ARM64-based Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 21H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.19044.5854",
              "status": "affected",
              "version": "10.0.19044.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "ARM64-based Systems",
            "x64-based Systems"
          ],
          "product": "Windows 11 version 22H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.22621.5335",
              "status": "affected",
              "version": "10.0.22621.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems",
            "ARM64-based Systems",
            "32-bit Systems"
          ],
          "product": "Windows 10 Version 22H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.19045.5854",
              "status": "affected",
              "version": "10.0.19045.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2025 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.26100.4061",
              "status": "affected",
              "version": "10.0.26100.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "ARM64-based Systems"
          ],
          "product": "Windows 11 version 22H3",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.22631.5335",
              "status": "affected",
              "version": "10.0.22631.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows 11 Version 23H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.22631.5335",
              "status": "affected",
              "version": "10.0.22631.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2022, 23H2 Edition (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.25398.1611",
              "status": "affected",
              "version": "10.0.25398.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "ARM64-based Systems",
            "x64-based Systems"
          ],
          "product": "Windows 11 Version 24H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.26100.4061",
              "status": "affected",
              "version": "10.0.26100.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2025",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.26100.4061",
              "status": "affected",
              "version": "10.0.26100.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 1507",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.10240.21014",
              "status": "affected",
              "version": "10.0.10240.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 1607",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.14393.8066",
              "status": "affected",
              "version": "10.0.14393.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2016",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.14393.8066",
              "status": "affected",
              "version": "10.0.14393.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2016 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.14393.8066",
              "status": "affected",
              "version": "10.0.14393.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems"
          ],
          "product": "Windows Server 2008 Service Pack 2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.0.6003.23279",
              "status": "affected",
              "version": "6.0.6003.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "product": "Windows Server 2008 Service Pack 2 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.0.6003.23279",
              "status": "affected",
              "version": "6.0.6003.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2008  Service Pack 2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.0.6003.23279",
              "status": "affected",
              "version": "6.0.6003.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2008 R2 Service Pack 1",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.1.7601.27729",
              "status": "affected",
              "version": "6.1.7601.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2008 R2 Service Pack 1 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.1.7601.27729",
              "status": "affected",
              "version": "6.1.7601.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2012",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.2.9200.25475",
              "status": "affected",
              "version": "6.2.9200.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2012 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.2.9200.25475",
              "status": "affected",
              "version": "6.2.9200.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2012 R2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.3.9600.22577",
              "status": "affected",
              "version": "6.3.9600.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2012 R2 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.3.9600.22577",
              "status": "affected",
              "version": "6.3.9600.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*",
                  "versionEndExcluding": "16.97.25042725",
                  "versionStartIncluding": "16.0.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:office:*:*:android:*:*:*:*:*",
                  "versionEndExcluding": "16.0.18827.20000",
                  "versionStartIncluding": "16.0.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:office:*:*:universal:*:*:*:*:*",
                  "versionEndExcluding": "16.0.14326.22502",
                  "versionStartIncluding": "16.0.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*",
                  "versionEndExcluding": "16.97.25042725",
                  "versionStartIncluding": "1.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
                  "versionEndExcluding": "10.0.17763.7314",
                  "versionStartIncluding": "10.0.17763.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.17763.7314",
                  "versionStartIncluding": "10.0.17763.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.17763.7314",
                  "versionStartIncluding": "10.0.17763.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.20348.3692",
                  "versionStartIncluding": "10.0.20348.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*",
                  "versionEndExcluding": "10.0.19044.5854",
                  "versionStartIncluding": "10.0.19044.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_11_22H2:*:*:*:*:*:*:arm64:*",
                  "versionEndExcluding": "10.0.22621.5335",
                  "versionStartIncluding": "10.0.22621.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "10.0.19045.5854",
                  "versionStartIncluding": "10.0.19045.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.26100.4061",
                  "versionStartIncluding": "10.0.26100.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*",
                  "versionEndExcluding": "10.0.22631.5335",
                  "versionStartIncluding": "10.0.22631.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "10.0.22631.5335",
                  "versionStartIncluding": "10.0.22631.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_23h2:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.25398.1611",
                  "versionStartIncluding": "10.0.25398.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*",
                  "versionEndExcluding": "10.0.26100.4061",
                  "versionStartIncluding": "10.0.26100.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.26100.4061",
                  "versionStartIncluding": "10.0.26100.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*",
                  "versionEndExcluding": "10.0.10240.21014",
                  "versionStartIncluding": "10.0.10240.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
                  "versionEndExcluding": "10.0.14393.8066",
                  "versionStartIncluding": "10.0.14393.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.14393.8066",
                  "versionStartIncluding": "10.0.14393.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.14393.8066",
                  "versionStartIncluding": "10.0.14393.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.0.6003.23279",
                  "versionStartIncluding": "6.0.6003.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.0.6003.23279",
                  "versionStartIncluding": "6.0.6003.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x86:*",
                  "versionEndExcluding": "6.0.6003.23279",
                  "versionStartIncluding": "6.0.6003.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.1.7601.27729",
                  "versionStartIncluding": "6.1.7601.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.1.7601.27729",
                  "versionStartIncluding": "6.1.7601.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.2.9200.25475",
                  "versionStartIncluding": "6.2.9200.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.2.9200.25475",
                  "versionStartIncluding": "6.2.9200.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.3.9600.22577",
                  "versionStartIncluding": "6.3.9600.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.3.9600.22577",
                  "versionStartIncluding": "6.3.9600.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2025-05-13T07:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Heap-based buffer overflow in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "CWE-122: Heap-based Buffer Overflow",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-09-10T00:09:43.614Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Windows Graphics Component Remote Code Execution Vulnerability",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30388"
        }
      ],
      "title": "Windows Graphics Component Remote Code Execution Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2025-30388",
    "datePublished": "2025-05-13T16:59:10.344Z",
    "dateReserved": "2025-03-21T19:09:29.815Z",
    "dateUpdated": "2025-09-10T00:09:43.614Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2025-30388\",\"sourceIdentifier\":\"secure@microsoft.com\",\"published\":\"2025-05-13T17:16:01.903\",\"lastModified\":\"2025-05-19T18:31:38.407\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Heap-based buffer overflow in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.\"},{\"lang\":\"es\",\"value\":\"Desbordamiento de b\u00fafer basado en mont\u00f3n en Windows Win32K: GRFX permite que un atacante no autorizado ejecute c\u00f3digo localmente.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"secure@microsoft.com\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"secure@microsoft.com\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-122\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-787\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:office:*:*:*:*:*:universal:*:*\",\"versionEndExcluding\":\"16.0.14326.22502\",\"matchCriteriaId\":\"E7E0351C-846A-4E4F-A15C-F1D5FF0A8D62\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:office:*:*:*:*:*:android:*:*\",\"versionEndExcluding\":\"16.0.18827.20000\",\"matchCriteriaId\":\"69858942-34BA-4316-B11B-2F6B3655F596\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:macos:*:*\",\"matchCriteriaId\":\"BF0E8112-5B6F-4E55-8E40-38ADCF6FC654\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:macos:*:*\",\"matchCriteriaId\":\"EF3E56B5-E6A6-4061-9380-D421E52B9199\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.0.10240.21014\",\"matchCriteriaId\":\"59596E66-63AB-4895-A385-57111ED18743\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.0.14393.8066\",\"matchCriteriaId\":\"286B3A60-FF95-4391-8AF0-D46D5AAB6234\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*\",\"versionEndExcluding\":\"10.0.17763.7314\",\"matchCriteriaId\":\"63199B82-79B6-461A-AC6D-CD1EE5EBCC80\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*\",\"versionEndExcluding\":\"10.0.17763.7314\",\"matchCriteriaId\":\"C7D99F6B-B97B-4010-AA5C-84E9FE50D860\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.0.19044.5854\",\"matchCriteriaId\":\"87D3BE2A-EF7B-4653-AE64-9F8FE0E12223\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.0.19045.5854\",\"matchCriteriaId\":\"6F95690D-5720-4ACD-A378-BC3040E42AF2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.0.22621.5335\",\"matchCriteriaId\":\"9929270C-5F72-40B8-B36B-073E6D1B00B6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.0.22631.5335\",\"matchCriteriaId\":\"894FA410-3F24-45CB-B347-3F839CBA8DD8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.0.26100.4061\",\"matchCriteriaId\":\"644E96C3-1EA7-48E2-B800-C6ADA2D65FCD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*\",\"matchCriteriaId\":\"5F422A8C-2C4E-42C8-B420-E0728037E15C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*\",\"matchCriteriaId\":\"AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A7DF96F8-BA6A-4780-9CA3-F719B3F81074\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.0.14393.8066\",\"matchCriteriaId\":\"91433700-DB90-4524-8FAE-FF3895C2A45F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.0.17763.7314\",\"matchCriteriaId\":\"1B47EE2B-4081-4D43-8AF7-C8EB11852312\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.0.20348.3692\",\"matchCriteriaId\":\"76679D4E-C4EF-4EED-BCDE-79F5AF859576\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.0.25398.1611\",\"matchCriteriaId\":\"2B9B2720-3733-4C50-85F7-156D781D15B8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.0.26100.4061\",\"matchCriteriaId\":\"DAE51E4F-FCFF-4DC0-9B76-861EE20D54A4\"}]}]}],\"references\":[{\"url\":\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30388\",\"source\":\"secure@microsoft.com\",\"tags\":[\"Vendor Advisory\"]}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2025-30388\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-05-13T20:09:47.636978Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-05-13T20:09:49.482Z\"}}], \"cna\": {\"title\": \"Windows Graphics Component Remote Code Execution Vulnerability\", \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"version\": \"3.1\", \"baseScore\": 7.8, \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C\"}, \"scenarios\": [{\"lang\": \"en-US\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"Microsoft\", \"product\": \"Microsoft Office LTSC for Mac 2021\", \"versions\": [{\"status\": \"affected\", \"version\": \"16.0.1\", \"lessThan\": \"16.97.25042725\", \"versionType\": \"custom\"}], \"platforms\": [\"Unknown\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Microsoft Office for Android\", \"versions\": [{\"status\": \"affected\", \"version\": \"16.0.1\", \"lessThan\": \"16.0.18827.20000\", \"versionType\": \"custom\"}], \"platforms\": [\"Unknown\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Microsoft Office for Universal\", \"versions\": [{\"status\": \"affected\", \"version\": \"16.0.1\", \"lessThan\": \"16.0.14326.22502\", \"versionType\": \"custom\"}], \"platforms\": [\"Unknown\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Microsoft Office LTSC for Mac 2024\", \"versions\": [{\"status\": \"affected\", \"version\": \"1.0.0\", \"lessThan\": \"16.97.25042725\", \"versionType\": \"custom\"}], \"platforms\": [\"Unknown\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows 10 Version 1809\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.17763.0\", \"lessThan\": \"10.0.17763.7314\", \"versionType\": \"custom\"}], \"platforms\": [\"32-bit Systems\", \"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2019\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.17763.0\", \"lessThan\": \"10.0.17763.7314\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2019 (Server Core installation)\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.17763.0\", \"lessThan\": \"10.0.17763.7314\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2022\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.20348.0\", \"lessThan\": \"10.0.20348.3692\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows 10 Version 21H2\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.19044.0\", \"lessThan\": \"10.0.19044.5854\", \"versionType\": \"custom\"}], \"platforms\": [\"32-bit Systems\", \"ARM64-based Systems\", \"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows 11 version 22H2\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.22621.0\", \"lessThan\": \"10.0.22621.5335\", \"versionType\": \"custom\"}], \"platforms\": [\"ARM64-based Systems\", \"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows 10 Version 22H2\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.19045.0\", \"lessThan\": \"10.0.19045.5854\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\", \"ARM64-based Systems\", \"32-bit Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2025 (Server Core installation)\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.26100.0\", \"lessThan\": \"10.0.26100.4061\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows 11 version 22H3\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.22631.0\", \"lessThan\": \"10.0.22631.5335\", \"versionType\": \"custom\"}], \"platforms\": [\"ARM64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows 11 Version 23H2\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.22631.0\", \"lessThan\": \"10.0.22631.5335\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2022, 23H2 Edition (Server Core installation)\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.25398.0\", \"lessThan\": \"10.0.25398.1611\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows 11 Version 24H2\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.26100.0\", \"lessThan\": \"10.0.26100.4061\", \"versionType\": \"custom\"}], \"platforms\": [\"ARM64-based Systems\", \"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2025\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.26100.0\", \"lessThan\": \"10.0.26100.4061\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows 10 Version 1507\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.10240.0\", \"lessThan\": \"10.0.10240.21014\", \"versionType\": \"custom\"}], \"platforms\": [\"32-bit Systems\", \"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows 10 Version 1607\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.14393.0\", \"lessThan\": \"10.0.14393.8066\", \"versionType\": \"custom\"}], \"platforms\": [\"32-bit Systems\", \"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2016\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.14393.0\", \"lessThan\": \"10.0.14393.8066\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2016 (Server Core installation)\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.14393.0\", \"lessThan\": \"10.0.14393.8066\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2008 Service Pack 2\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.0.6003.0\", \"lessThan\": \"6.0.6003.23279\", \"versionType\": \"custom\"}], \"platforms\": [\"32-bit Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2008 Service Pack 2 (Server Core installation)\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.0.6003.0\", \"lessThan\": \"6.0.6003.23279\", \"versionType\": \"custom\"}], \"platforms\": [\"32-bit Systems\", \"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2008  Service Pack 2\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.0.6003.0\", \"lessThan\": \"6.0.6003.23279\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2008 R2 Service Pack 1\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.1.7601.0\", \"lessThan\": \"6.1.7601.27729\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2008 R2 Service Pack 1 (Server Core installation)\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.1.7601.0\", \"lessThan\": \"6.1.7601.27729\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2012\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.2.9200.0\", \"lessThan\": \"6.2.9200.25475\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2012 (Server Core installation)\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.2.9200.0\", \"lessThan\": \"6.2.9200.25475\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2012 R2\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.3.9600.0\", \"lessThan\": \"6.3.9600.22577\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2012 R2 (Server Core installation)\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.3.9600.0\", \"lessThan\": \"6.3.9600.22577\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\"]}], \"datePublic\": \"2025-05-13T07:00:00.000Z\", \"references\": [{\"url\": \"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30388\", \"name\": \"Windows Graphics Component Remote Code Execution Vulnerability\", \"tags\": [\"vendor-advisory\"]}], \"descriptions\": [{\"lang\": \"en-US\", \"value\": \"Heap-based buffer overflow in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en-US\", \"type\": \"CWE\", \"cweId\": \"CWE-122\", \"description\": \"CWE-122: Heap-based Buffer Overflow\"}]}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"16.97.25042725\", \"versionStartIncluding\": \"16.0.1\"}, {\"criteria\": \"cpe:2.3:a:microsoft:office:*:*:android:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"16.0.18827.20000\", \"versionStartIncluding\": \"16.0.1\"}, {\"criteria\": \"cpe:2.3:a:microsoft:office:*:*:universal:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"16.0.14326.22502\", \"versionStartIncluding\": \"16.0.1\"}, {\"criteria\": \"cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"16.97.25042725\", \"versionStartIncluding\": \"1.0.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.17763.7314\", \"versionStartIncluding\": \"10.0.17763.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.17763.7314\", \"versionStartIncluding\": \"10.0.17763.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.17763.7314\", \"versionStartIncluding\": \"10.0.17763.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.20348.3692\", \"versionStartIncluding\": \"10.0.20348.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.19044.5854\", \"versionStartIncluding\": \"10.0.19044.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_11_22H2:*:*:*:*:*:*:arm64:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.22621.5335\", \"versionStartIncluding\": \"10.0.22621.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.19045.5854\", \"versionStartIncluding\": \"10.0.19045.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.26100.4061\", \"versionStartIncluding\": \"10.0.26100.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.22631.5335\", \"versionStartIncluding\": \"10.0.22631.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.22631.5335\", \"versionStartIncluding\": \"10.0.22631.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_23h2:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.25398.1611\", \"versionStartIncluding\": \"10.0.25398.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.26100.4061\", \"versionStartIncluding\": \"10.0.26100.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.26100.4061\", \"versionStartIncluding\": \"10.0.26100.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.10240.21014\", \"versionStartIncluding\": \"10.0.10240.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.14393.8066\", \"versionStartIncluding\": \"10.0.14393.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.14393.8066\", \"versionStartIncluding\": \"10.0.14393.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.14393.8066\", \"versionStartIncluding\": \"10.0.14393.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.0.6003.23279\", \"versionStartIncluding\": \"6.0.6003.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.0.6003.23279\", \"versionStartIncluding\": \"6.0.6003.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x86:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.0.6003.23279\", \"versionStartIncluding\": \"6.0.6003.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1.7601.27729\", \"versionStartIncluding\": \"6.1.7601.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1.7601.27729\", \"versionStartIncluding\": \"6.1.7601.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.2.9200.25475\", \"versionStartIncluding\": \"6.2.9200.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.2.9200.25475\", \"versionStartIncluding\": \"6.2.9200.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.3.9600.22577\", \"versionStartIncluding\": \"6.3.9600.0\"}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.3.9600.22577\", \"versionStartIncluding\": \"6.3.9600.0\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"shortName\": \"microsoft\", \"dateUpdated\": \"2025-09-10T00:09:43.614Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2025-30388\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-09-10T00:09:43.614Z\", \"dateReserved\": \"2025-03-21T19:09:29.815Z\", \"assignerOrgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"datePublished\": \"2025-05-13T16:59:10.344Z\", \"assignerShortName\": \"microsoft\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}

fkie_cve-2025-30388

Vulnerability from fkie_nvd

Published

2025-05-13 17:16

Modified

2025-05-19 18:31

Severity ?

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Summary

Heap-based buffer overflow in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.

References

	URL	Tags
	secure@microsoft.com	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30388	Vendor Advisory

Impacted products

Vendor	Product	Version
microsoft	office	*
microsoft	office	*
microsoft	office_long_term_servicing_channel	2021
microsoft	office_long_term_servicing_channel	2024
microsoft	windows_10_1507	*
microsoft	windows_10_1607	*
microsoft	windows_10_1809	*
microsoft	windows_10_1809	*
microsoft	windows_10_21h2	*
microsoft	windows_10_22h2	*
microsoft	windows_11_22h2	*
microsoft	windows_11_23h2	*
microsoft	windows_11_24h2	*
microsoft	windows_server_2008	-
microsoft	windows_server_2008	r2
microsoft	windows_server_2012	-
microsoft	windows_server_2016	*
microsoft	windows_server_2019	*
microsoft	windows_server_2022	*
microsoft	windows_server_2022_23h2	*
microsoft	windows_server_2025	*

JSON

To clipboard

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:microsoft:office:*:*:*:*:*:universal:*:*",
              "matchCriteriaId": "E7E0351C-846A-4E4F-A15C-F1D5FF0A8D62",
              "versionEndExcluding": "16.0.14326.22502",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:office:*:*:*:*:*:android:*:*",
              "matchCriteriaId": "69858942-34BA-4316-B11B-2F6B3655F596",
              "versionEndExcluding": "16.0.18827.20000",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:macos:*:*",
              "matchCriteriaId": "BF0E8112-5B6F-4E55-8E40-38ADCF6FC654",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:macos:*:*",
              "matchCriteriaId": "EF3E56B5-E6A6-4061-9380-D421E52B9199",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "59596E66-63AB-4895-A385-57111ED18743",
              "versionEndExcluding": "10.0.10240.21014",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "286B3A60-FF95-4391-8AF0-D46D5AAB6234",
              "versionEndExcluding": "10.0.14393.8066",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
              "matchCriteriaId": "63199B82-79B6-461A-AC6D-CD1EE5EBCC80",
              "versionEndExcluding": "10.0.17763.7314",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
              "matchCriteriaId": "C7D99F6B-B97B-4010-AA5C-84E9FE50D860",
              "versionEndExcluding": "10.0.17763.7314",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "87D3BE2A-EF7B-4653-AE64-9F8FE0E12223",
              "versionEndExcluding": "10.0.19044.5854",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "6F95690D-5720-4ACD-A378-BC3040E42AF2",
              "versionEndExcluding": "10.0.19045.5854",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "9929270C-5F72-40B8-B36B-073E6D1B00B6",
              "versionEndExcluding": "10.0.22621.5335",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "894FA410-3F24-45CB-B347-3F839CBA8DD8",
              "versionEndExcluding": "10.0.22631.5335",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "644E96C3-1EA7-48E2-B800-C6ADA2D65FCD",
              "versionEndExcluding": "10.0.26100.4061",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
              "matchCriteriaId": "5F422A8C-2C4E-42C8-B420-E0728037E15C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
              "matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "91433700-DB90-4524-8FAE-FF3895C2A45F",
              "versionEndExcluding": "10.0.14393.8066",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "1B47EE2B-4081-4D43-8AF7-C8EB11852312",
              "versionEndExcluding": "10.0.17763.7314",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "76679D4E-C4EF-4EED-BCDE-79F5AF859576",
              "versionEndExcluding": "10.0.20348.3692",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2B9B2720-3733-4C50-85F7-156D781D15B8",
              "versionEndExcluding": "10.0.25398.1611",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "DAE51E4F-FCFF-4DC0-9B76-861EE20D54A4",
              "versionEndExcluding": "10.0.26100.4061",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Heap-based buffer overflow in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de b\u00fafer basado en mont\u00f3n en Windows Win32K: GRFX permite que un atacante no autorizado ejecute c\u00f3digo localmente."
    }
  ],
  "id": "CVE-2025-30388",
  "lastModified": "2025-05-19T18:31:38.407",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 7.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "REQUIRED",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 5.9,
        "source": "secure@microsoft.com",
        "type": "Primary"
      }
    ]
  },
  "published": "2025-05-13T17:16:01.903",
  "references": [
    {
      "source": "secure@microsoft.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30388"
    }
  ],
  "sourceIdentifier": "secure@microsoft.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-122"
        }
      ],
      "source": "secure@microsoft.com",
      "type": "Primary"
    },
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-787"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

ncsc-2025-0159

Vulnerability from csaf_ncscnl

Published

2025-05-13 19:47

Modified

2025-05-13 19:47

Summary

Kwetsbaarheden verholpen in Microsoft Windows

Notes

The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions: NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein. NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory. This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.

Feiten

Microsoft heeft kwetsbaarheden verholpen in Windows.

Interpretaties

Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de volgende categorieën schade: - Denial-of-Service (DoS) - Omzeilen van een beveiligingsmaatregel - Uitvoer van willekeurige code (root/adminrechten) - Uitvoer van willekeurige code (gebruikersrechten) - Toegang tot systeemgegevens - Toegang tot gevoelige gegevens - Verkrijgen van verhoogde rechten ``` Windows Trusted Runtime Interface Driver: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-29829 | 5.50 | Toegang tot gevoelige gegevens | |----------------|------|-------------------------------------| Windows File Server: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-29839 | 4.00 | Toegang tot gevoelige gegevens | |----------------|------|-------------------------------------| Windows Remote Desktop: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-29966 | 8.80 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Active Directory Certificate Services (AD CS): |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-29968 | 6.50 | Denial-of-Service | |----------------|------|-------------------------------------| Windows Ancillary Function Driver for WinSock: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-32709 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Drivers: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-29838 | 7.40 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Kernel: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-29974 | 5.70 | Toegang tot gevoelige gegevens | | CVE-2025-24063 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows DWM: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-30400 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Microsoft Brokering File System: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-29970 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Installer: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-29837 | 5.50 | Toegang tot gevoelige gegevens | |----------------|------|-------------------------------------| Microsoft Scripting Engine: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-30397 | 7.50 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Windows Hardware Lab Kit: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-27488 | 6.70 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Routing and Remote Access Service (RRAS): |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-29959 | 6.50 | Toegang tot gevoelige gegevens | | CVE-2025-29960 | 6.50 | Toegang tot gevoelige gegevens | | CVE-2025-29830 | 6.50 | Toegang tot gevoelige gegevens | | CVE-2025-29832 | 6.50 | Toegang tot gevoelige gegevens | | CVE-2025-29835 | 6.50 | Toegang tot gevoelige gegevens | | CVE-2025-29836 | 6.50 | Toegang tot gevoelige gegevens | | CVE-2025-29958 | 6.50 | Toegang tot gevoelige gegevens | | CVE-2025-29961 | 6.50 | Toegang tot gevoelige gegevens | |----------------|------|-------------------------------------| Windows Win32K - GRFX: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-30388 | 7.80 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Role: Windows Hyper-V: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-29955 | 6.20 | Denial-of-Service | |----------------|------|-------------------------------------| Web Threat Defense (WTD.sys): |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-29971 | 7.50 | Denial-of-Service | |----------------|------|-------------------------------------| Windows NTFS: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-32707 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Remote Desktop Gateway Service: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-29967 | 8.80 | Uitvoeren van willekeurige code | | CVE-2025-30394 | 5.90 | Denial-of-Service | | CVE-2025-26677 | 7.50 | Denial-of-Service | | CVE-2025-29831 | 7.50 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Universal Print Management Service: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-29841 | 7.00 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Media: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-29964 | 8.80 | Uitvoeren van willekeurige code | | CVE-2025-29840 | 8.80 | Uitvoeren van willekeurige code | | CVE-2025-29962 | 8.80 | Uitvoeren van willekeurige code | | CVE-2025-29963 | 8.80 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Windows Virtual Machine Bus: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-29833 | 7.10 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Windows SMB: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-29956 | 5.40 | Toegang tot gevoelige gegevens | |----------------|------|-------------------------------------| Windows Common Log File System Driver: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-32701 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2025-32706 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2025-30385 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Secure Kernel Mode: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-27468 | 7.00 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Fundamentals: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-29969 | 7.50 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Windows LDAP - Lightweight Directory Access Protocol: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-29954 | 5.90 | Denial-of-Service | |----------------|------|-------------------------------------| Windows Deployment Services: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-29957 | 6.20 | Denial-of-Service | |----------------|------|-------------------------------------| UrlMon: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-29842 | 7.50 | Omzeilen van beveiligingsmaatregel | |----------------|------|-------------------------------------| ```

Oplossingen

Microsoft heeft updates beschikbaar gesteld waarmee de beschreven kwetsbaarheden worden verholpen. We raden u aan om deze updates te installeren. Meer informatie over de kwetsbaarheden, de installatie van de updates en eventuele work-arounds vindt u op: https://portal.msrc.microsoft.com/en-us/security-guidance

Kans

medium

Schade

high

CWE-591

Sensitive Data Storage in Improperly Locked Memory

CWE-59

Improper Link Resolution Before File Access ('Link Following')

CWE-191

Integer Underflow (Wrap or Wraparound)

CWE-126

Buffer Over-read

CWE-349

Acceptance of Extraneous Untrusted Data With Trusted Data

CWE-367

Time-of-check Time-of-use (TOCTOU) Race Condition

CWE-908

Use of Uninitialized Resource

CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CWE-798

Use of Hard-coded Credentials

CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

CWE-125

Out-of-bounds Read

CWE-416

Use After Free

CWE-476

NULL Pointer Dereference

CWE-400

Uncontrolled Resource Consumption

CWE-122

Heap-based Buffer Overflow

CWE-121

Stack-based Buffer Overflow

CWE-269

Improper Privilege Management

CWE-20

Improper Input Validation

JSON

To clipboard

{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "nl",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n    NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n    NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n    This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
      },
      {
        "category": "description",
        "text": "Microsoft heeft kwetsbaarheden verholpen in Windows.",
        "title": "Feiten"
      },
      {
        "category": "description",
        "text": "Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de volgende categorie\u00ebn schade:\n\n- Denial-of-Service (DoS)\n- Omzeilen van een beveiligingsmaatregel\n- Uitvoer van willekeurige code (root/adminrechten)\n- Uitvoer van willekeurige code (gebruikersrechten)\n- Toegang tot systeemgegevens\n- Toegang tot gevoelige gegevens\n- Verkrijgen van verhoogde rechten\n\n```\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-29829 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-29839 | 4.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-29966 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-29968 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-32709 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-29838 | 7.40 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-29974 | 5.70 | Toegang tot gevoelige gegevens      | \n| CVE-2025-24063 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-30400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-29970 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-29837 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Scripting Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-30397 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Hardware Lab Kit: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-27488 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-29959 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2025-29960 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2025-29830 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2025-29832 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2025-29835 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2025-29836 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2025-29958 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2025-29961 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-30388 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRole: Windows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-29955 | 6.20 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWeb Threat Defense (WTD.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-29971 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-32707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Gateway Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-29967 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2025-30394 | 5.90 | Denial-of-Service                   | \n| CVE-2025-26677 | 7.50 | Denial-of-Service                   | \n| CVE-2025-29831 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nUniversal Print Management Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-29841 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-29964 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2025-29840 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2025-29962 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2025-29963 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Machine Bus: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-29833 | 7.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-29956 | 5.40 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-32701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2025-32706 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2025-30385 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-27468 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Fundamentals: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-29969 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-29954 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-29957 | 6.20 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nUrlMon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-29842 | 7.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n```",
        "title": "Interpretaties"
      },
      {
        "category": "description",
        "text": "Microsoft heeft updates beschikbaar gesteld waarmee de beschreven kwetsbaarheden worden verholpen. We raden u aan om deze updates te installeren. Meer informatie over de kwetsbaarheden, de installatie van de updates en eventuele work-arounds vindt u op:\n\nhttps://portal.msrc.microsoft.com/en-us/security-guidance",
        "title": "Oplossingen"
      },
      {
        "category": "general",
        "text": "medium",
        "title": "Kans"
      },
      {
        "category": "general",
        "text": "high",
        "title": "Schade"
      },
      {
        "category": "general",
        "text": "Sensitive Data Storage in Improperly Locked Memory",
        "title": "CWE-591"
      },
      {
        "category": "general",
        "text": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
        "title": "CWE-59"
      },
      {
        "category": "general",
        "text": "Integer Underflow (Wrap or Wraparound)",
        "title": "CWE-191"
      },
      {
        "category": "general",
        "text": "Buffer Over-read",
        "title": "CWE-126"
      },
      {
        "category": "general",
        "text": "Acceptance of Extraneous Untrusted Data With Trusted Data",
        "title": "CWE-349"
      },
      {
        "category": "general",
        "text": "Time-of-check Time-of-use (TOCTOU) Race Condition",
        "title": "CWE-367"
      },
      {
        "category": "general",
        "text": "Use of Uninitialized Resource",
        "title": "CWE-908"
      },
      {
        "category": "general",
        "text": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
        "title": "CWE-843"
      },
      {
        "category": "general",
        "text": "Use of Hard-coded Credentials",
        "title": "CWE-798"
      },
      {
        "category": "general",
        "text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
        "title": "CWE-362"
      },
      {
        "category": "general",
        "text": "Out-of-bounds Read",
        "title": "CWE-125"
      },
      {
        "category": "general",
        "text": "Use After Free",
        "title": "CWE-416"
      },
      {
        "category": "general",
        "text": "NULL Pointer Dereference",
        "title": "CWE-476"
      },
      {
        "category": "general",
        "text": "Uncontrolled Resource Consumption",
        "title": "CWE-400"
      },
      {
        "category": "general",
        "text": "Heap-based Buffer Overflow",
        "title": "CWE-122"
      },
      {
        "category": "general",
        "text": "Stack-based Buffer Overflow",
        "title": "CWE-121"
      },
      {
        "category": "general",
        "text": "Improper Privilege Management",
        "title": "CWE-269"
      },
      {
        "category": "general",
        "text": "Improper Input Validation",
        "title": "CWE-20"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "cert@ncsc.nl",
      "name": "Nationaal Cyber Security Centrum",
      "namespace": "https://www.ncsc.nl/"
    },
    "title": "Kwetsbaarheden verholpen in Microsoft Windows",
    "tracking": {
      "current_release_date": "2025-05-13T19:47:12.555983Z",
      "generator": {
        "date": "2025-02-25T15:15:00Z",
        "engine": {
          "name": "V.A.",
          "version": "1.0"
        }
      },
      "id": "NCSC-2025-0159",
      "initial_release_date": "2025-05-13T19:47:12.555983Z",
      "revision_history": [
        {
          "date": "2025-05-13T19:47:12.555983Z",
          "number": "1.0.0",
          "summary": "Initiele versie"
        }
      ],
      "status": "final",
      "version": "1.0.0"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/10.0.19045.5854",
                    "product": {
                      "name": "vers:microsoft/10.0.19045.5854",
                      "product_id": "CSAFPID-2835605",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:microsoft:windows_10_22H2:10.0.19045.5854:*:*:*:*:*:x64:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows 10 Version 22H2 for x64-based Systems"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/10.0.22621.5335",
                    "product": {
                      "name": "vers:microsoft/10.0.22621.5335",
                      "product_id": "CSAFPID-2835604",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:microsoft:windows_11_22H2:10.0.22621.5335:*:*:*:*:*:x64:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows 11 Version 22H2 for x64-based Systems"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/10.0.22621.5335",
                    "product": {
                      "name": "vers:microsoft/10.0.22621.5335",
                      "product_id": "CSAFPID-2835603",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:microsoft:windows_11_22H2:10.0.22621.5335:*:*:*:*:*:arm64:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows 11 Version 22H2 for ARM64-based Systems"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/10.0.19044.5854",
                    "product": {
                      "name": "vers:microsoft/10.0.19044.5854",
                      "product_id": "CSAFPID-2835602",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:microsoft:windows_10_21H2:10.0.19044.5854:*:*:*:*:*:x64:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows 10 Version 21H2 for x64-based Systems"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/10.0.19044.5854",
                    "product": {
                      "name": "vers:microsoft/10.0.19044.5854",
                      "product_id": "CSAFPID-2835601",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:microsoft:windows_10_21H2:10.0.19044.5854:*:*:*:*:*:arm64:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows 10 Version 21H2 for ARM64-based Systems"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/10.0.19044.5854",
                    "product": {
                      "name": "vers:microsoft/10.0.19044.5854",
                      "product_id": "CSAFPID-2835600",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:microsoft:windows_10_21H2:10.0.19044.5854:*:*:*:*:*:x86:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows 10 Version 21H2 for 32-bit Systems"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/10.0.20348.3692",
                    "product": {
                      "name": "vers:microsoft/10.0.20348.3692",
                      "product_id": "CSAFPID-2835599",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:microsoft:windows_server_2022:10.0.20348.3692:*:*:*:*:*:*:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows Server 2022 (Server Core installation)"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/10.0.17763.7314",
                    "product": {
                      "name": "vers:microsoft/10.0.17763.7314",
                      "product_id": "CSAFPID-2835596",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:microsoft:windows_server_2019:10.0.17763.7314:*:*:*:*:*:*:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows Server 2019"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/10.0.17763.7314",
                    "product": {
                      "name": "vers:microsoft/10.0.17763.7314",
                      "product_id": "CSAFPID-2835597",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:microsoft:windows_server_2019:10.0.17763.7314:*:*:*:*:*:*:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows Server 2019 (Server Core installation)"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/10.0.14393.8066",
                    "product": {
                      "name": "vers:microsoft/10.0.14393.8066",
                      "product_id": "CSAFPID-2835620",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.8066:*:*:*:*:*:*:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows Server 2016 (Server Core installation)"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/10.0.14393.8066",
                    "product": {
                      "name": "vers:microsoft/10.0.14393.8066",
                      "product_id": "CSAFPID-2835618",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:microsoft:windows_10_1607:10.0.14393.8066:*:*:*:*:*:x64:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows 10 Version 1607 for x64-based Systems"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/10.0.14393.8066",
                    "product": {
                      "name": "vers:microsoft/10.0.14393.8066",
                      "product_id": "CSAFPID-2835617",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:microsoft:windows_10_1607:10.0.14393.8066:*:*:*:*:*:x86:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows 10 Version 1607 for 32-bit Systems"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/10.0.10240.21014",
                    "product": {
                      "name": "vers:microsoft/10.0.10240.21014",
                      "product_id": "CSAFPID-2835616",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:microsoft:windows_10_1507:10.0.10240.21014:*:*:*:*:*:x64:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows 10 for x64-based Systems"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/10.0.10240.21014",
                    "product": {
                      "name": "vers:microsoft/10.0.10240.21014",
                      "product_id": "CSAFPID-2835615",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:microsoft:windows_10_1507:10.0.10240.21014:*:*:*:*:*:x86:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows 10 for 32-bit Systems"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/unknown",
                    "product": {
                      "name": "vers:microsoft/unknown",
                      "product_id": "CSAFPID-2835634",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:microsoft:windows_server_hlk_2025:*:*:*:*:*:*:*:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows HLK for Windows Server 2025"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/10.0.26100.4061",
                    "product": {
                      "name": "vers:microsoft/10.0.26100.4061",
                      "product_id": "CSAFPID-2835613",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:microsoft:windows_11_24H2:10.0.26100.4061:*:*:*:*:*:x64:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows 11 Version 24H2 for x64-based Systems"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/10.0.26100.4061",
                    "product": {
                      "name": "vers:microsoft/10.0.26100.4061",
                      "product_id": "CSAFPID-2835612",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:microsoft:windows_11_24H2:10.0.26100.4061:*:*:*:*:*:arm64:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows 11 Version 24H2 for ARM64-based Systems"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/10.0.22631.5335",
                    "product": {
                      "name": "vers:microsoft/10.0.22631.5335",
                      "product_id": "CSAFPID-2835610",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:microsoft:windows_11_23H2:10.0.22631.5335:*:*:*:*:*:x64:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows 11 Version 23H2 for x64-based Systems"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/10.0.22631.5335",
                    "product": {
                      "name": "vers:microsoft/10.0.22631.5335",
                      "product_id": "CSAFPID-2835609",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:microsoft:windows_11_23H2:10.0.22631.5335:*:*:*:*:*:arm64:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows 11 Version 23H2 for ARM64-based Systems"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/10.0.19045.5854",
                    "product": {
                      "name": "vers:microsoft/10.0.19045.5854",
                      "product_id": "CSAFPID-2835607",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:microsoft:windows_10_22H2:10.0.19045.5854:*:*:*:*:*:x86:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows 10 Version 22H2 for 32-bit Systems"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/10.0.19045.5854",
                    "product": {
                      "name": "vers:microsoft/10.0.19045.5854",
                      "product_id": "CSAFPID-2835606",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:microsoft:windows_10_22H2:10.0.19045.5854:*:*:*:*:*:arm64:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows 10 Version 22H2 for ARM64-based Systems"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/10.0.17763.7314",
                    "product": {
                      "name": "vers:microsoft/10.0.17763.7314",
                      "product_id": "CSAFPID-2835595",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.7314:*:*:*:*:*:x64:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows 10 Version 1809 for x64-based Systems"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/10.0.17763.7314",
                    "product": {
                      "name": "vers:microsoft/10.0.17763.7314",
                      "product_id": "CSAFPID-2835594",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.7314:*:*:*:*:*:x86:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows 10 Version 1809 for 32-bit Systems"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/unknown",
                    "product": {
                      "name": "vers:microsoft/unknown",
                      "product_id": "CSAFPID-2835644",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:microsoft:windows_server_hlk_2019:*:*:*:*:*:*:*:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows HLK for Windows Server 2019"
              }
            ],
            "category": "product_family",
            "name": "Windows"
          },
          {
            "branches": [
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/10.0.19044.5854 arm",
                    "product": {
                      "name": "vers:microsoft/10.0.19044.5854 arm",
                      "product_id": "CSAFPID-2835574"
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows 10 21h2"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/10.0.14393.8066",
                    "product": {
                      "name": "vers:microsoft/10.0.14393.8066",
                      "product_id": "CSAFPID-2835563"
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows Server 2016"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/10.0.26100.4061",
                    "product": {
                      "name": "vers:microsoft/10.0.26100.4061",
                      "product_id": "CSAFPID-2835557"
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows Server 2025"
              }
            ],
            "category": "product_family",
            "name": "Microsoft"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/6.3.9600.0|\u003c6.3.9600.22577",
                "product": {
                  "name": "vers:unknown/6.3.9600.0|\u003c6.3.9600.22577",
                  "product_id": "CSAFPID-2835224"
                }
              }
            ],
            "category": "product_name",
            "name": "Windows Server 2012 R2"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/6.3.9600.0|\u003c6.3.9600.22577",
                "product": {
                  "name": "vers:unknown/6.3.9600.0|\u003c6.3.9600.22577",
                  "product_id": "CSAFPID-2835225"
                }
              }
            ],
            "category": "product_name",
            "name": "Windows Server 2012 R2 (Server Core installation)"
          },
          {
            "branches": [
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/6.2.9200.25475",
                    "product": {
                      "name": "vers:microsoft/6.2.9200.25475",
                      "product_id": "CSAFPID-2835627",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:microsoft:windows_server_2012:6.2.9200.25475:*:*:*:*:*:x64:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows Server 2012"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/6.1.7601.27729",
                    "product": {
                      "name": "vers:microsoft/6.1.7601.27729",
                      "product_id": "CSAFPID-2835625",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:microsoft:windows_server_2008_R2:6.1.7601.27729:*:*:*:*:*:x64:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows Server 2008 R2 for x64-based Systems Service Pack 1"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/6.1.7601.27729",
                    "product": {
                      "name": "vers:microsoft/6.1.7601.27729",
                      "product_id": "CSAFPID-2835626",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:microsoft:windows_server_2008_R2:6.1.7601.27729:*:*:*:*:*:x64:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/6.0.6003.23279",
                    "product": {
                      "name": "vers:microsoft/6.0.6003.23279",
                      "product_id": "CSAFPID-2835624",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:microsoft:windows_server_2008_sp2:6.0.6003.23279:*:*:*:*:*:x86:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/6.0.6003.23279",
                    "product": {
                      "name": "vers:microsoft/6.0.6003.23279",
                      "product_id": "CSAFPID-2835621",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:microsoft:windows_server_2008_sp2:6.0.6003.23279:*:*:*:*:*:x64:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows Server 2008 for 32-bit Systems Service Pack 2"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/6.0.6003.23279",
                    "product": {
                      "name": "vers:microsoft/6.0.6003.23279",
                      "product_id": "CSAFPID-2835622",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:microsoft:windows_server_2008_sp2:6.0.6003.23279:*:*:*:*:*:x64:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)"
              }
            ],
            "category": "product_family",
            "name": "ESU"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/10.0.25398.0|\u003c10.0.25398.1611",
                "product": {
                  "name": "vers:unknown/10.0.25398.0|\u003c10.0.25398.1611",
                  "product_id": "CSAFPID-2835218"
                }
              }
            ],
            "category": "product_name",
            "name": "Windows Server 2022, 23H2 Edition (Server Core installation)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/10.0.26100.0|\u003c10.0.26100.4061",
                "product": {
                  "name": "vers:unknown/10.0.26100.0|\u003c10.0.26100.4061",
                  "product_id": "CSAFPID-2835217"
                }
              }
            ],
            "category": "product_name",
            "name": "Windows Server 2025 (Server Core installation)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/1.0.0|\u003c16.97.25042725",
                "product": {
                  "name": "vers:unknown/1.0.0|\u003c16.97.25042725",
                  "product_id": "CSAFPID-2835429"
                }
              }
            ],
            "category": "product_name",
            "name": "Microsoft Office LTSC for Mac 2024"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/16.0.1|\u003c16.0.14326.22502",
                "product": {
                  "name": "vers:unknown/16.0.1|\u003c16.0.14326.22502",
                  "product_id": "CSAFPID-2835439"
                }
              }
            ],
            "category": "product_name",
            "name": "Microsoft Office for Universal"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/16.0.1|\u003c16.0.18827.20000",
                "product": {
                  "name": "vers:unknown/16.0.1|\u003c16.0.18827.20000",
                  "product_id": "CSAFPID-2835428"
                }
              }
            ],
            "category": "product_name",
            "name": "Microsoft Office for Android"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/16.0.1|\u003c16.97.25042725",
                "product": {
                  "name": "vers:unknown/16.0.1|\u003c16.97.25042725",
                  "product_id": "CSAFPID-2835427"
                }
              }
            ],
            "category": "product_name",
            "name": "Microsoft Office LTSC for Mac 2021"
          }
        ],
        "category": "vendor",
        "name": "Microsoft"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-1260618"
                }
              }
            ],
            "category": "product_name",
            "name": "Microsoft Windows Server 2022"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-1322604"
                }
              }
            ],
            "category": "product_name",
            "name": "Microsoft Windows Server 2012 R2 (Server Core installation)"
          }
        ],
        "category": "vendor",
        "name": "IBM"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-29959",
      "cwe": {
        "id": "CWE-908",
        "name": "Use of Uninitialized Resource"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use of Uninitialized Resource",
          "title": "CWE-908"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29959",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29959.json"
        }
      ],
      "title": "CVE-2025-29959"
    },
    {
      "cve": "CVE-2025-29960",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29960",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29960.json"
        }
      ],
      "title": "CVE-2025-29960"
    },
    {
      "cve": "CVE-2025-29964",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29964",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29964.json"
        }
      ],
      "title": "CVE-2025-29964"
    },
    {
      "cve": "CVE-2025-29966",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29966",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29966.json"
        }
      ],
      "title": "CVE-2025-29966"
    },
    {
      "cve": "CVE-2025-29967",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29967",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29967.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2835605",
            "CSAFPID-2835604",
            "CSAFPID-2835603",
            "CSAFPID-2835574",
            "CSAFPID-2835602",
            "CSAFPID-2835601",
            "CSAFPID-2835600",
            "CSAFPID-2835599",
            "CSAFPID-1260618",
            "CSAFPID-2835596",
            "CSAFPID-2835597",
            "CSAFPID-1322604",
            "CSAFPID-2835224",
            "CSAFPID-2835225",
            "CSAFPID-2835627",
            "CSAFPID-2835625",
            "CSAFPID-2835626",
            "CSAFPID-2835624",
            "CSAFPID-2835621",
            "CSAFPID-2835622",
            "CSAFPID-2835620",
            "CSAFPID-2835563",
            "CSAFPID-2835618",
            "CSAFPID-2835617",
            "CSAFPID-2835616",
            "CSAFPID-2835615",
            "CSAFPID-2835634",
            "CSAFPID-2835613",
            "CSAFPID-2835612",
            "CSAFPID-2835218",
            "CSAFPID-2835610",
            "CSAFPID-2835609",
            "CSAFPID-2835217",
            "CSAFPID-2835607",
            "CSAFPID-2835606",
            "CSAFPID-2835595",
            "CSAFPID-2835594",
            "CSAFPID-2835557",
            "CSAFPID-2835429",
            "CSAFPID-2835439",
            "CSAFPID-2835428",
            "CSAFPID-2835427",
            "CSAFPID-2835644"
          ]
        }
      ],
      "title": "CVE-2025-29967"
    },
    {
      "cve": "CVE-2025-29969",
      "cwe": {
        "id": "CWE-367",
        "name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
      },
      "notes": [
        {
          "category": "other",
          "text": "Time-of-check Time-of-use (TOCTOU) Race Condition",
          "title": "CWE-367"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29969",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29969.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2835605",
            "CSAFPID-2835604",
            "CSAFPID-2835603",
            "CSAFPID-2835574",
            "CSAFPID-2835602",
            "CSAFPID-2835601",
            "CSAFPID-2835600",
            "CSAFPID-2835599",
            "CSAFPID-1260618",
            "CSAFPID-2835596",
            "CSAFPID-2835597",
            "CSAFPID-1322604",
            "CSAFPID-2835224",
            "CSAFPID-2835225",
            "CSAFPID-2835627",
            "CSAFPID-2835625",
            "CSAFPID-2835626",
            "CSAFPID-2835624",
            "CSAFPID-2835621",
            "CSAFPID-2835622",
            "CSAFPID-2835620",
            "CSAFPID-2835563",
            "CSAFPID-2835618",
            "CSAFPID-2835617",
            "CSAFPID-2835616",
            "CSAFPID-2835615",
            "CSAFPID-2835634",
            "CSAFPID-2835613",
            "CSAFPID-2835612",
            "CSAFPID-2835218",
            "CSAFPID-2835610",
            "CSAFPID-2835609",
            "CSAFPID-2835217",
            "CSAFPID-2835607",
            "CSAFPID-2835606",
            "CSAFPID-2835595",
            "CSAFPID-2835594",
            "CSAFPID-2835557",
            "CSAFPID-2835429",
            "CSAFPID-2835439",
            "CSAFPID-2835428",
            "CSAFPID-2835427",
            "CSAFPID-2835644"
          ]
        }
      ],
      "title": "CVE-2025-29969"
    },
    {
      "cve": "CVE-2025-27468",
      "cwe": {
        "id": "CWE-269",
        "name": "Improper Privilege Management"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Privilege Management",
          "title": "CWE-269"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-27468",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-27468.json"
        }
      ],
      "title": "CVE-2025-27468"
    },
    {
      "cve": "CVE-2025-30400",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30400",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30400.json"
        }
      ],
      "title": "CVE-2025-30400"
    },
    {
      "cve": "CVE-2025-32701",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-32701",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-32701.json"
        }
      ],
      "title": "CVE-2025-32701"
    },
    {
      "cve": "CVE-2025-32706",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Input Validation",
          "title": "CWE-20"
        },
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-32706",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-32706.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2835605",
            "CSAFPID-2835604",
            "CSAFPID-2835603",
            "CSAFPID-2835574",
            "CSAFPID-2835602",
            "CSAFPID-2835601",
            "CSAFPID-2835600",
            "CSAFPID-2835599",
            "CSAFPID-1260618",
            "CSAFPID-2835596",
            "CSAFPID-2835597",
            "CSAFPID-1322604",
            "CSAFPID-2835224",
            "CSAFPID-2835225",
            "CSAFPID-2835627",
            "CSAFPID-2835625",
            "CSAFPID-2835626",
            "CSAFPID-2835624",
            "CSAFPID-2835621",
            "CSAFPID-2835622",
            "CSAFPID-2835620",
            "CSAFPID-2835563",
            "CSAFPID-2835618",
            "CSAFPID-2835617",
            "CSAFPID-2835616",
            "CSAFPID-2835615",
            "CSAFPID-2835634",
            "CSAFPID-2835613",
            "CSAFPID-2835612",
            "CSAFPID-2835218",
            "CSAFPID-2835610",
            "CSAFPID-2835609",
            "CSAFPID-2835217",
            "CSAFPID-2835607",
            "CSAFPID-2835606",
            "CSAFPID-2835595",
            "CSAFPID-2835594",
            "CSAFPID-2835557",
            "CSAFPID-2835429",
            "CSAFPID-2835439",
            "CSAFPID-2835428",
            "CSAFPID-2835427",
            "CSAFPID-2835644"
          ]
        }
      ],
      "title": "CVE-2025-32706"
    },
    {
      "cve": "CVE-2025-32709",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-32709",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-32709.json"
        }
      ],
      "title": "CVE-2025-32709"
    },
    {
      "cve": "CVE-2025-29829",
      "cwe": {
        "id": "CWE-908",
        "name": "Use of Uninitialized Resource"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use of Uninitialized Resource",
          "title": "CWE-908"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29829",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29829.json"
        }
      ],
      "title": "CVE-2025-29829"
    },
    {
      "cve": "CVE-2025-29830",
      "cwe": {
        "id": "CWE-908",
        "name": "Use of Uninitialized Resource"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use of Uninitialized Resource",
          "title": "CWE-908"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29830",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29830.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2835605",
            "CSAFPID-2835604",
            "CSAFPID-2835603",
            "CSAFPID-2835574",
            "CSAFPID-2835602",
            "CSAFPID-2835601",
            "CSAFPID-2835600",
            "CSAFPID-2835599",
            "CSAFPID-1260618",
            "CSAFPID-2835596",
            "CSAFPID-2835597",
            "CSAFPID-1322604",
            "CSAFPID-2835224",
            "CSAFPID-2835225",
            "CSAFPID-2835627",
            "CSAFPID-2835625",
            "CSAFPID-2835626",
            "CSAFPID-2835624",
            "CSAFPID-2835621",
            "CSAFPID-2835622",
            "CSAFPID-2835620",
            "CSAFPID-2835563",
            "CSAFPID-2835618",
            "CSAFPID-2835617",
            "CSAFPID-2835616",
            "CSAFPID-2835615",
            "CSAFPID-2835634",
            "CSAFPID-2835613",
            "CSAFPID-2835612",
            "CSAFPID-2835218",
            "CSAFPID-2835610",
            "CSAFPID-2835609",
            "CSAFPID-2835217",
            "CSAFPID-2835607",
            "CSAFPID-2835606",
            "CSAFPID-2835595",
            "CSAFPID-2835594",
            "CSAFPID-2835557",
            "CSAFPID-2835429",
            "CSAFPID-2835439",
            "CSAFPID-2835428",
            "CSAFPID-2835427",
            "CSAFPID-2835644"
          ]
        }
      ],
      "title": "CVE-2025-29830"
    },
    {
      "cve": "CVE-2025-29832",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29832",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29832.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2835605",
            "CSAFPID-2835604",
            "CSAFPID-2835603",
            "CSAFPID-2835574",
            "CSAFPID-2835602",
            "CSAFPID-2835601",
            "CSAFPID-2835600",
            "CSAFPID-2835599",
            "CSAFPID-1260618",
            "CSAFPID-2835596",
            "CSAFPID-2835597",
            "CSAFPID-1322604",
            "CSAFPID-2835224",
            "CSAFPID-2835225",
            "CSAFPID-2835627",
            "CSAFPID-2835625",
            "CSAFPID-2835626",
            "CSAFPID-2835624",
            "CSAFPID-2835621",
            "CSAFPID-2835622",
            "CSAFPID-2835620",
            "CSAFPID-2835563",
            "CSAFPID-2835618",
            "CSAFPID-2835617",
            "CSAFPID-2835616",
            "CSAFPID-2835615",
            "CSAFPID-2835634",
            "CSAFPID-2835613",
            "CSAFPID-2835612",
            "CSAFPID-2835218",
            "CSAFPID-2835610",
            "CSAFPID-2835609",
            "CSAFPID-2835217",
            "CSAFPID-2835607",
            "CSAFPID-2835606",
            "CSAFPID-2835595",
            "CSAFPID-2835594",
            "CSAFPID-2835557",
            "CSAFPID-2835429",
            "CSAFPID-2835439",
            "CSAFPID-2835428",
            "CSAFPID-2835427",
            "CSAFPID-2835644"
          ]
        }
      ],
      "title": "CVE-2025-29832"
    },
    {
      "cve": "CVE-2025-29833",
      "cwe": {
        "id": "CWE-367",
        "name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
      },
      "notes": [
        {
          "category": "other",
          "text": "Time-of-check Time-of-use (TOCTOU) Race Condition",
          "title": "CWE-367"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29833",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29833.json"
        }
      ],
      "title": "CVE-2025-29833"
    },
    {
      "cve": "CVE-2025-29835",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        },
        {
          "category": "other",
          "text": "NULL Pointer Dereference",
          "title": "CWE-476"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29835",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29835.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2835605",
            "CSAFPID-2835604",
            "CSAFPID-2835603",
            "CSAFPID-2835574",
            "CSAFPID-2835602",
            "CSAFPID-2835601",
            "CSAFPID-2835600",
            "CSAFPID-2835599",
            "CSAFPID-1260618",
            "CSAFPID-2835596",
            "CSAFPID-2835597",
            "CSAFPID-1322604",
            "CSAFPID-2835224",
            "CSAFPID-2835225",
            "CSAFPID-2835627",
            "CSAFPID-2835625",
            "CSAFPID-2835626",
            "CSAFPID-2835624",
            "CSAFPID-2835621",
            "CSAFPID-2835622",
            "CSAFPID-2835620",
            "CSAFPID-2835563",
            "CSAFPID-2835618",
            "CSAFPID-2835617",
            "CSAFPID-2835616",
            "CSAFPID-2835615",
            "CSAFPID-2835634",
            "CSAFPID-2835613",
            "CSAFPID-2835612",
            "CSAFPID-2835218",
            "CSAFPID-2835610",
            "CSAFPID-2835609",
            "CSAFPID-2835217",
            "CSAFPID-2835607",
            "CSAFPID-2835606",
            "CSAFPID-2835595",
            "CSAFPID-2835594",
            "CSAFPID-2835557",
            "CSAFPID-2835429",
            "CSAFPID-2835439",
            "CSAFPID-2835428",
            "CSAFPID-2835427",
            "CSAFPID-2835644"
          ]
        }
      ],
      "title": "CVE-2025-29835"
    },
    {
      "cve": "CVE-2025-29836",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29836",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29836.json"
        }
      ],
      "title": "CVE-2025-29836"
    },
    {
      "cve": "CVE-2025-29837",
      "cwe": {
        "id": "CWE-59",
        "name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
          "title": "CWE-59"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29837",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29837.json"
        }
      ],
      "title": "CVE-2025-29837"
    },
    {
      "cve": "CVE-2025-29839",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29839",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29839.json"
        }
      ],
      "title": "CVE-2025-29839"
    },
    {
      "cve": "CVE-2025-29840",
      "cwe": {
        "id": "CWE-121",
        "name": "Stack-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Stack-based Buffer Overflow",
          "title": "CWE-121"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29840",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29840.json"
        }
      ],
      "title": "CVE-2025-29840"
    },
    {
      "cve": "CVE-2025-29842",
      "cwe": {
        "id": "CWE-349",
        "name": "Acceptance of Extraneous Untrusted Data With Trusted Data"
      },
      "notes": [
        {
          "category": "other",
          "text": "Acceptance of Extraneous Untrusted Data With Trusted Data",
          "title": "CWE-349"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29842",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29842.json"
        }
      ],
      "title": "CVE-2025-29842"
    },
    {
      "cve": "CVE-2025-29954",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "notes": [
        {
          "category": "other",
          "text": "Uncontrolled Resource Consumption",
          "title": "CWE-400"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29954",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29954.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2835605",
            "CSAFPID-2835604",
            "CSAFPID-2835603",
            "CSAFPID-2835574",
            "CSAFPID-2835602",
            "CSAFPID-2835601",
            "CSAFPID-2835600",
            "CSAFPID-2835599",
            "CSAFPID-1260618",
            "CSAFPID-2835596",
            "CSAFPID-2835597",
            "CSAFPID-1322604",
            "CSAFPID-2835224",
            "CSAFPID-2835225",
            "CSAFPID-2835627",
            "CSAFPID-2835625",
            "CSAFPID-2835626",
            "CSAFPID-2835624",
            "CSAFPID-2835621",
            "CSAFPID-2835622",
            "CSAFPID-2835620",
            "CSAFPID-2835563",
            "CSAFPID-2835618",
            "CSAFPID-2835617",
            "CSAFPID-2835616",
            "CSAFPID-2835615",
            "CSAFPID-2835634",
            "CSAFPID-2835613",
            "CSAFPID-2835612",
            "CSAFPID-2835218",
            "CSAFPID-2835610",
            "CSAFPID-2835609",
            "CSAFPID-2835217",
            "CSAFPID-2835607",
            "CSAFPID-2835606",
            "CSAFPID-2835595",
            "CSAFPID-2835594",
            "CSAFPID-2835557",
            "CSAFPID-2835429",
            "CSAFPID-2835439",
            "CSAFPID-2835428",
            "CSAFPID-2835427",
            "CSAFPID-2835644"
          ]
        }
      ],
      "title": "CVE-2025-29954"
    },
    {
      "cve": "CVE-2025-29956",
      "cwe": {
        "id": "CWE-126",
        "name": "Buffer Over-read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Buffer Over-read",
          "title": "CWE-126"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29956",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29956.json"
        }
      ],
      "title": "CVE-2025-29956"
    },
    {
      "cve": "CVE-2025-29957",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "notes": [
        {
          "category": "other",
          "text": "Uncontrolled Resource Consumption",
          "title": "CWE-400"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29957",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29957.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2835605",
            "CSAFPID-2835604",
            "CSAFPID-2835603",
            "CSAFPID-2835574",
            "CSAFPID-2835602",
            "CSAFPID-2835601",
            "CSAFPID-2835600",
            "CSAFPID-2835599",
            "CSAFPID-1260618",
            "CSAFPID-2835596",
            "CSAFPID-2835597",
            "CSAFPID-1322604",
            "CSAFPID-2835224",
            "CSAFPID-2835225",
            "CSAFPID-2835627",
            "CSAFPID-2835625",
            "CSAFPID-2835626",
            "CSAFPID-2835624",
            "CSAFPID-2835621",
            "CSAFPID-2835622",
            "CSAFPID-2835620",
            "CSAFPID-2835563",
            "CSAFPID-2835618",
            "CSAFPID-2835617",
            "CSAFPID-2835616",
            "CSAFPID-2835615",
            "CSAFPID-2835634",
            "CSAFPID-2835613",
            "CSAFPID-2835612",
            "CSAFPID-2835218",
            "CSAFPID-2835610",
            "CSAFPID-2835609",
            "CSAFPID-2835217",
            "CSAFPID-2835607",
            "CSAFPID-2835606",
            "CSAFPID-2835595",
            "CSAFPID-2835594",
            "CSAFPID-2835557",
            "CSAFPID-2835429",
            "CSAFPID-2835439",
            "CSAFPID-2835428",
            "CSAFPID-2835427",
            "CSAFPID-2835644"
          ]
        }
      ],
      "title": "CVE-2025-29957"
    },
    {
      "cve": "CVE-2025-29958",
      "cwe": {
        "id": "CWE-908",
        "name": "Use of Uninitialized Resource"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use of Uninitialized Resource",
          "title": "CWE-908"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29958",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29958.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2835605",
            "CSAFPID-2835604",
            "CSAFPID-2835603",
            "CSAFPID-2835574",
            "CSAFPID-2835602",
            "CSAFPID-2835601",
            "CSAFPID-2835600",
            "CSAFPID-2835599",
            "CSAFPID-1260618",
            "CSAFPID-2835596",
            "CSAFPID-2835597",
            "CSAFPID-1322604",
            "CSAFPID-2835224",
            "CSAFPID-2835225",
            "CSAFPID-2835627",
            "CSAFPID-2835625",
            "CSAFPID-2835626",
            "CSAFPID-2835624",
            "CSAFPID-2835621",
            "CSAFPID-2835622",
            "CSAFPID-2835620",
            "CSAFPID-2835563",
            "CSAFPID-2835618",
            "CSAFPID-2835617",
            "CSAFPID-2835616",
            "CSAFPID-2835615",
            "CSAFPID-2835634",
            "CSAFPID-2835613",
            "CSAFPID-2835612",
            "CSAFPID-2835218",
            "CSAFPID-2835610",
            "CSAFPID-2835609",
            "CSAFPID-2835217",
            "CSAFPID-2835607",
            "CSAFPID-2835606",
            "CSAFPID-2835595",
            "CSAFPID-2835594",
            "CSAFPID-2835557",
            "CSAFPID-2835429",
            "CSAFPID-2835439",
            "CSAFPID-2835428",
            "CSAFPID-2835427",
            "CSAFPID-2835644"
          ]
        }
      ],
      "title": "CVE-2025-29958"
    },
    {
      "cve": "CVE-2025-29961",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29961",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29961.json"
        }
      ],
      "title": "CVE-2025-29961"
    },
    {
      "cve": "CVE-2025-29962",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29962",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29962.json"
        }
      ],
      "title": "CVE-2025-29962"
    },
    {
      "cve": "CVE-2025-29963",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29963",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29963.json"
        }
      ],
      "title": "CVE-2025-29963"
    },
    {
      "cve": "CVE-2025-29974",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        },
        {
          "category": "other",
          "text": "Integer Underflow (Wrap or Wraparound)",
          "title": "CWE-191"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29974",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29974.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2835605",
            "CSAFPID-2835604",
            "CSAFPID-2835603",
            "CSAFPID-2835574",
            "CSAFPID-2835602",
            "CSAFPID-2835601",
            "CSAFPID-2835600",
            "CSAFPID-2835599",
            "CSAFPID-1260618",
            "CSAFPID-2835596",
            "CSAFPID-2835597",
            "CSAFPID-1322604",
            "CSAFPID-2835224",
            "CSAFPID-2835225",
            "CSAFPID-2835627",
            "CSAFPID-2835625",
            "CSAFPID-2835626",
            "CSAFPID-2835624",
            "CSAFPID-2835621",
            "CSAFPID-2835622",
            "CSAFPID-2835620",
            "CSAFPID-2835563",
            "CSAFPID-2835618",
            "CSAFPID-2835617",
            "CSAFPID-2835616",
            "CSAFPID-2835615",
            "CSAFPID-2835634",
            "CSAFPID-2835613",
            "CSAFPID-2835612",
            "CSAFPID-2835218",
            "CSAFPID-2835610",
            "CSAFPID-2835609",
            "CSAFPID-2835217",
            "CSAFPID-2835607",
            "CSAFPID-2835606",
            "CSAFPID-2835595",
            "CSAFPID-2835594",
            "CSAFPID-2835557",
            "CSAFPID-2835429",
            "CSAFPID-2835439",
            "CSAFPID-2835428",
            "CSAFPID-2835427",
            "CSAFPID-2835644"
          ]
        }
      ],
      "title": "CVE-2025-29974"
    },
    {
      "cve": "CVE-2025-30385",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30385",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30385.json"
        }
      ],
      "title": "CVE-2025-30385"
    },
    {
      "cve": "CVE-2025-30388",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30388",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30388.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2835605",
            "CSAFPID-2835604",
            "CSAFPID-2835603",
            "CSAFPID-2835574",
            "CSAFPID-2835602",
            "CSAFPID-2835601",
            "CSAFPID-2835600",
            "CSAFPID-2835599",
            "CSAFPID-1260618",
            "CSAFPID-2835596",
            "CSAFPID-2835597",
            "CSAFPID-1322604",
            "CSAFPID-2835224",
            "CSAFPID-2835225",
            "CSAFPID-2835627",
            "CSAFPID-2835625",
            "CSAFPID-2835626",
            "CSAFPID-2835624",
            "CSAFPID-2835621",
            "CSAFPID-2835622",
            "CSAFPID-2835620",
            "CSAFPID-2835563",
            "CSAFPID-2835618",
            "CSAFPID-2835617",
            "CSAFPID-2835616",
            "CSAFPID-2835615",
            "CSAFPID-2835634",
            "CSAFPID-2835613",
            "CSAFPID-2835612",
            "CSAFPID-2835218",
            "CSAFPID-2835610",
            "CSAFPID-2835609",
            "CSAFPID-2835217",
            "CSAFPID-2835607",
            "CSAFPID-2835606",
            "CSAFPID-2835595",
            "CSAFPID-2835594",
            "CSAFPID-2835557",
            "CSAFPID-2835429",
            "CSAFPID-2835439",
            "CSAFPID-2835428",
            "CSAFPID-2835427",
            "CSAFPID-2835644"
          ]
        }
      ],
      "title": "CVE-2025-30388"
    },
    {
      "cve": "CVE-2025-30397",
      "cwe": {
        "id": "CWE-843",
        "name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
          "title": "CWE-843"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30397",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30397.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2835605",
            "CSAFPID-2835604",
            "CSAFPID-2835603",
            "CSAFPID-2835574",
            "CSAFPID-2835602",
            "CSAFPID-2835601",
            "CSAFPID-2835600",
            "CSAFPID-2835599",
            "CSAFPID-1260618",
            "CSAFPID-2835596",
            "CSAFPID-2835597",
            "CSAFPID-1322604",
            "CSAFPID-2835224",
            "CSAFPID-2835225",
            "CSAFPID-2835627",
            "CSAFPID-2835625",
            "CSAFPID-2835626",
            "CSAFPID-2835624",
            "CSAFPID-2835621",
            "CSAFPID-2835622",
            "CSAFPID-2835620",
            "CSAFPID-2835563",
            "CSAFPID-2835618",
            "CSAFPID-2835617",
            "CSAFPID-2835616",
            "CSAFPID-2835615",
            "CSAFPID-2835634",
            "CSAFPID-2835613",
            "CSAFPID-2835612",
            "CSAFPID-2835218",
            "CSAFPID-2835610",
            "CSAFPID-2835609",
            "CSAFPID-2835217",
            "CSAFPID-2835607",
            "CSAFPID-2835606",
            "CSAFPID-2835595",
            "CSAFPID-2835594",
            "CSAFPID-2835557",
            "CSAFPID-2835429",
            "CSAFPID-2835439",
            "CSAFPID-2835428",
            "CSAFPID-2835427",
            "CSAFPID-2835644"
          ]
        }
      ],
      "title": "CVE-2025-30397"
    },
    {
      "cve": "CVE-2025-32707",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-32707",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-32707.json"
        }
      ],
      "title": "CVE-2025-32707"
    },
    {
      "cve": "CVE-2025-24063",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24063",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24063.json"
        }
      ],
      "title": "CVE-2025-24063"
    },
    {
      "cve": "CVE-2025-29968",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Input Validation",
          "title": "CWE-20"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29968",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29968.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2835605",
            "CSAFPID-2835604",
            "CSAFPID-2835603",
            "CSAFPID-2835574",
            "CSAFPID-2835602",
            "CSAFPID-2835601",
            "CSAFPID-2835600",
            "CSAFPID-2835599",
            "CSAFPID-1260618",
            "CSAFPID-2835596",
            "CSAFPID-2835597",
            "CSAFPID-1322604",
            "CSAFPID-2835224",
            "CSAFPID-2835225",
            "CSAFPID-2835627",
            "CSAFPID-2835625",
            "CSAFPID-2835626",
            "CSAFPID-2835624",
            "CSAFPID-2835621",
            "CSAFPID-2835622",
            "CSAFPID-2835620",
            "CSAFPID-2835563",
            "CSAFPID-2835618",
            "CSAFPID-2835617",
            "CSAFPID-2835616",
            "CSAFPID-2835615",
            "CSAFPID-2835634",
            "CSAFPID-2835613",
            "CSAFPID-2835612",
            "CSAFPID-2835218",
            "CSAFPID-2835610",
            "CSAFPID-2835609",
            "CSAFPID-2835217",
            "CSAFPID-2835607",
            "CSAFPID-2835606",
            "CSAFPID-2835595",
            "CSAFPID-2835594",
            "CSAFPID-2835557",
            "CSAFPID-2835429",
            "CSAFPID-2835439",
            "CSAFPID-2835428",
            "CSAFPID-2835427",
            "CSAFPID-2835644"
          ]
        }
      ],
      "title": "CVE-2025-29968"
    },
    {
      "cve": "CVE-2025-30394",
      "cwe": {
        "id": "CWE-591",
        "name": "Sensitive Data Storage in Improperly Locked Memory"
      },
      "notes": [
        {
          "category": "other",
          "text": "Sensitive Data Storage in Improperly Locked Memory",
          "title": "CWE-591"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30394",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30394.json"
        }
      ],
      "title": "CVE-2025-30394"
    },
    {
      "cve": "CVE-2025-26677",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "notes": [
        {
          "category": "other",
          "text": "Uncontrolled Resource Consumption",
          "title": "CWE-400"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-26677",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-26677.json"
        }
      ],
      "title": "CVE-2025-26677"
    },
    {
      "cve": "CVE-2025-29831",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29831",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29831.json"
        }
      ],
      "title": "CVE-2025-29831"
    },
    {
      "cve": "CVE-2025-29841",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
          "title": "CWE-362"
        },
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29841",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29841.json"
        }
      ],
      "title": "CVE-2025-29841"
    },
    {
      "cve": "CVE-2025-29971",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29971",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29971.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2835605",
            "CSAFPID-2835604",
            "CSAFPID-2835603",
            "CSAFPID-2835574",
            "CSAFPID-2835602",
            "CSAFPID-2835601",
            "CSAFPID-2835600",
            "CSAFPID-2835599",
            "CSAFPID-1260618",
            "CSAFPID-2835596",
            "CSAFPID-2835597",
            "CSAFPID-1322604",
            "CSAFPID-2835224",
            "CSAFPID-2835225",
            "CSAFPID-2835627",
            "CSAFPID-2835625",
            "CSAFPID-2835626",
            "CSAFPID-2835624",
            "CSAFPID-2835621",
            "CSAFPID-2835622",
            "CSAFPID-2835620",
            "CSAFPID-2835563",
            "CSAFPID-2835618",
            "CSAFPID-2835617",
            "CSAFPID-2835616",
            "CSAFPID-2835615",
            "CSAFPID-2835634",
            "CSAFPID-2835613",
            "CSAFPID-2835612",
            "CSAFPID-2835218",
            "CSAFPID-2835610",
            "CSAFPID-2835609",
            "CSAFPID-2835217",
            "CSAFPID-2835607",
            "CSAFPID-2835606",
            "CSAFPID-2835595",
            "CSAFPID-2835594",
            "CSAFPID-2835557",
            "CSAFPID-2835429",
            "CSAFPID-2835439",
            "CSAFPID-2835428",
            "CSAFPID-2835427",
            "CSAFPID-2835644"
          ]
        }
      ],
      "title": "CVE-2025-29971"
    },
    {
      "cve": "CVE-2025-29970",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29970",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29970.json"
        }
      ],
      "title": "CVE-2025-29970"
    },
    {
      "cve": "CVE-2025-29838",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "notes": [
        {
          "category": "other",
          "text": "NULL Pointer Dereference",
          "title": "CWE-476"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29838",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29838.json"
        }
      ],
      "title": "CVE-2025-29838"
    },
    {
      "cve": "CVE-2025-29955",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Input Validation",
          "title": "CWE-20"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29955",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29955.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2835605",
            "CSAFPID-2835604",
            "CSAFPID-2835603",
            "CSAFPID-2835574",
            "CSAFPID-2835602",
            "CSAFPID-2835601",
            "CSAFPID-2835600",
            "CSAFPID-2835599",
            "CSAFPID-1260618",
            "CSAFPID-2835596",
            "CSAFPID-2835597",
            "CSAFPID-1322604",
            "CSAFPID-2835224",
            "CSAFPID-2835225",
            "CSAFPID-2835627",
            "CSAFPID-2835625",
            "CSAFPID-2835626",
            "CSAFPID-2835624",
            "CSAFPID-2835621",
            "CSAFPID-2835622",
            "CSAFPID-2835620",
            "CSAFPID-2835563",
            "CSAFPID-2835618",
            "CSAFPID-2835617",
            "CSAFPID-2835616",
            "CSAFPID-2835615",
            "CSAFPID-2835634",
            "CSAFPID-2835613",
            "CSAFPID-2835612",
            "CSAFPID-2835218",
            "CSAFPID-2835610",
            "CSAFPID-2835609",
            "CSAFPID-2835217",
            "CSAFPID-2835607",
            "CSAFPID-2835606",
            "CSAFPID-2835595",
            "CSAFPID-2835594",
            "CSAFPID-2835557",
            "CSAFPID-2835429",
            "CSAFPID-2835439",
            "CSAFPID-2835428",
            "CSAFPID-2835427",
            "CSAFPID-2835644"
          ]
        }
      ],
      "title": "CVE-2025-29955"
    },
    {
      "cve": "CVE-2025-27488",
      "cwe": {
        "id": "CWE-798",
        "name": "Use of Hard-coded Credentials"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use of Hard-coded Credentials",
          "title": "CWE-798"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-27488",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-27488.json"
        }
      ],
      "title": "CVE-2025-27488"
    }
  ]
}

ncsc-2025-0155

Vulnerability from csaf_ncscnl

Published

2025-05-13 18:58

Modified

2025-05-13 18:58

Summary

Kwetsbaarheden verholpen in Microsoft Office

Notes

Feiten

Microsoft heeft kwetsbaarheden verholpen in diverse Office producten.

Interpretaties

Een kwaadwillende kan de kwetsbaarheden misbruiken om zich verhoogde rechten toe te kennen en willekeurige code uit te voeren met rechten van het slachtoffer. Voor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen. ``` Microsoft Office PowerPoint: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-29978 | 7.80 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Microsoft Office Outlook: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-32705 | 7.80 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Microsoft Office: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-30377 | 8.40 | Uitvoeren van willekeurige code | | CVE-2025-30386 | 8.40 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Microsoft Office SharePoint: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-29976 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2025-30378 | 7.00 | Uitvoeren van willekeurige code | | CVE-2025-30382 | 7.80 | Uitvoeren van willekeurige code | | CVE-2025-30384 | 7.40 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Microsoft Office Excel: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-29977 | 7.80 | Uitvoeren van willekeurige code | | CVE-2025-29979 | 7.80 | Uitvoeren van willekeurige code | | CVE-2025-30375 | 7.80 | Uitvoeren van willekeurige code | | CVE-2025-30376 | 7.80 | Uitvoeren van willekeurige code | | CVE-2025-30379 | 7.80 | Uitvoeren van willekeurige code | | CVE-2025-30381 | 7.80 | Uitvoeren van willekeurige code | | CVE-2025-30383 | 7.80 | Uitvoeren van willekeurige code | | CVE-2025-30393 | 7.80 | Uitvoeren van willekeurige code | | CVE-2025-32704 | 8.40 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Windows Win32K - GRFX: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-30388 | 7.80 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| ```

Oplossingen

Kans

medium

Schade

high

CWE-763

Release of Invalid Pointer or Reference

CWE-822

Untrusted Pointer Dereference

CWE-126

Buffer Over-read

CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CWE-125

Out-of-bounds Read

CWE-416

Use After Free

CWE-502

Deserialization of Untrusted Data

CWE-122

Heap-based Buffer Overflow

CWE-269

Improper Privilege Management

JSON

To clipboard

{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "nl",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n    NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n    NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n    This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
      },
      {
        "category": "description",
        "text": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten.",
        "title": "Feiten"
      },
      {
        "category": "description",
        "text": "Een kwaadwillende kan de kwetsbaarheden misbruiken om zich verhoogde rechten toe te kennen en willekeurige code uit te voeren met rechten van het slachtoffer.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen.\n\n```\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-29978 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Outlook: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-32705 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-30377 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2025-30386 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-29976 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2025-30378 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2025-30382 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2025-30384 | 7.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-29977 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2025-29979 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2025-30375 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2025-30376 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2025-30379 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2025-30381 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2025-30383 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2025-30393 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2025-32704 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-30388 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\n```",
        "title": "Interpretaties"
      },
      {
        "category": "description",
        "text": "Microsoft heeft updates beschikbaar gesteld waarmee de beschreven kwetsbaarheden worden verholpen. We raden u aan om deze updates te installeren. Meer informatie over de kwetsbaarheden, de installatie van de updates en eventuele work-arounds vindt u op:\n\nhttps://portal.msrc.microsoft.com/en-us/security-guidance",
        "title": "Oplossingen"
      },
      {
        "category": "general",
        "text": "medium",
        "title": "Kans"
      },
      {
        "category": "general",
        "text": "high",
        "title": "Schade"
      },
      {
        "category": "general",
        "text": "Release of Invalid Pointer or Reference",
        "title": "CWE-763"
      },
      {
        "category": "general",
        "text": "Untrusted Pointer Dereference",
        "title": "CWE-822"
      },
      {
        "category": "general",
        "text": "Buffer Over-read",
        "title": "CWE-126"
      },
      {
        "category": "general",
        "text": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
        "title": "CWE-843"
      },
      {
        "category": "general",
        "text": "Out-of-bounds Read",
        "title": "CWE-125"
      },
      {
        "category": "general",
        "text": "Use After Free",
        "title": "CWE-416"
      },
      {
        "category": "general",
        "text": "Deserialization of Untrusted Data",
        "title": "CWE-502"
      },
      {
        "category": "general",
        "text": "Heap-based Buffer Overflow",
        "title": "CWE-122"
      },
      {
        "category": "general",
        "text": "Improper Privilege Management",
        "title": "CWE-269"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "cert@ncsc.nl",
      "name": "Nationaal Cyber Security Centrum",
      "namespace": "https://www.ncsc.nl/"
    },
    "title": "Kwetsbaarheden verholpen in Microsoft Office",
    "tracking": {
      "current_release_date": "2025-05-13T18:58:56.989073Z",
      "generator": {
        "date": "2025-02-25T15:15:00Z",
        "engine": {
          "name": "V.A.",
          "version": "1.0"
        }
      },
      "id": "NCSC-2025-0155",
      "initial_release_date": "2025-05-13T18:58:56.989073Z",
      "revision_history": [
        {
          "date": "2025-05-13T18:58:56.989073Z",
          "number": "1.0.0",
          "summary": "Initiele versie"
        }
      ],
      "status": "final",
      "version": "1.0.0"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/unknown",
                    "product": {
                      "name": "vers:microsoft/unknown",
                      "product_id": "CSAFPID-1770557",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:a:microsoft:excel_2016:*:*:*:*:*:*:x86:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Microsoft Excel 2016 (32-bit edition)"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/unknown",
                    "product": {
                      "name": "vers:microsoft/unknown",
                      "product_id": "CSAFPID-1770558",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:a:microsoft:excel_2016:*:*:*:*:*:*:x64:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Microsoft Excel 2016 (64-bit edition)"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/unknown",
                    "product": {
                      "name": "vers:microsoft/unknown",
                      "product_id": "CSAFPID-1770553",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:a:microsoft:office_2016:*:*:*:*:*:*:x86:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Microsoft Office 2016 (32-bit edition)"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/unknown",
                    "product": {
                      "name": "vers:microsoft/unknown",
                      "product_id": "CSAFPID-1770554",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:a:microsoft:office_2016:*:*:*:*:*:*:x64:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Microsoft Office 2016 (64-bit edition)"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/unknown",
                    "product": {
                      "name": "vers:microsoft/unknown",
                      "product_id": "CSAFPID-1770547",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:a:microsoft:office_2019:*:*:*:*:*:*:*:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Microsoft Office 2019 for 32-bit editions"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/unknown",
                    "product": {
                      "name": "vers:microsoft/unknown",
                      "product_id": "CSAFPID-1770548",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:a:microsoft:office_2019:*:*:*:*:*:*:*:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Microsoft Office 2019 for 64-bit editions"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/unknown",
                    "product": {
                      "name": "vers:microsoft/unknown",
                      "product_id": "CSAFPID-1770555",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Microsoft Office LTSC for Mac 2021"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/unknown",
                    "product": {
                      "name": "vers:microsoft/unknown",
                      "product_id": "CSAFPID-1770556",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Microsoft Office LTSC for Mac 2024"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/unknown",
                    "product": {
                      "name": "vers:microsoft/unknown",
                      "product_id": "CSAFPID-1770550",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Microsoft Office LTSC 2021 for 32-bit editions"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/unknown",
                    "product": {
                      "name": "vers:microsoft/unknown",
                      "product_id": "CSAFPID-1770551",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Microsoft Office LTSC 2024 for 32-bit editions"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/unknown",
                    "product": {
                      "name": "vers:microsoft/unknown",
                      "product_id": "CSAFPID-1770552",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Microsoft Office LTSC 2024 for 64-bit editions"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/unknown",
                    "product": {
                      "name": "vers:microsoft/unknown",
                      "product_id": "CSAFPID-1429583",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:a:microsoft:sharepoint_server:-:*:*:*:subscription:*:*:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Microsoft SharePoint Server Subscription Edition"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/unknown",
                    "product": {
                      "name": "vers:microsoft/unknown",
                      "product_id": "CSAFPID-1770546",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:a:microsoft:sharepoint_server_2019:*:*:*:*:*:*:*:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Microsoft SharePoint Server 2019"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/unknown",
                    "product": {
                      "name": "vers:microsoft/unknown",
                      "product_id": "CSAFPID-1770545",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:a:microsoft:sharepoint_server_2016:*:*:*:*:enterprise:*:*:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Microsoft SharePoint Enterprise Server 2016"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/unknown",
                    "product": {
                      "name": "vers:microsoft/unknown",
                      "product_id": "CSAFPID-1429573",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Microsoft 365 Apps for Enterprise for 32-bit Systems"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/unknown",
                    "product": {
                      "name": "vers:microsoft/unknown",
                      "product_id": "CSAFPID-1429574",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Microsoft 365 Apps for Enterprise for 64-bit Systems"
              }
            ],
            "category": "product_family",
            "name": "Microsoft Office"
          },
          {
            "branches": [
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:unknown/2019",
                    "product": {
                      "name": "vers:unknown/2019",
                      "product_id": "CSAFPID-1247900"
                    }
                  },
                  {
                    "category": "product_version_range",
                    "name": "vers:unknown/2021 ltsc",
                    "product": {
                      "name": "vers:unknown/2021 ltsc",
                      "product_id": "CSAFPID-1300946"
                    }
                  }
                ],
                "category": "product_name",
                "name": "Office"
              }
            ],
            "category": "product_family",
            "name": "Microsoft"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/unknown",
                "product": {
                  "name": "vers:unknown/unknown",
                  "product_id": "CSAFPID-2566619",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:microsoft:powerpoint:*:*:*:*:*:*:*:*"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "powerpoint"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/unknown",
                "product": {
                  "name": "vers:unknown/unknown",
                  "product_id": "CSAFPID-1332181",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:*:*:*:*"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "sharepoint_server"
          }
        ],
        "category": "vendor",
        "name": "Microsoft"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-29976",
      "cwe": {
        "id": "CWE-269",
        "name": "Improper Privilege Management"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Privilege Management",
          "title": "CWE-269"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1770557",
          "CSAFPID-1770558",
          "CSAFPID-1770553",
          "CSAFPID-1770554",
          "CSAFPID-1770547",
          "CSAFPID-1770548",
          "CSAFPID-1770555",
          "CSAFPID-1770556",
          "CSAFPID-1770550",
          "CSAFPID-1770551",
          "CSAFPID-1770552",
          "CSAFPID-1247900",
          "CSAFPID-1300946",
          "CSAFPID-2566619",
          "CSAFPID-1429583",
          "CSAFPID-1770546",
          "CSAFPID-1770545",
          "CSAFPID-1429573",
          "CSAFPID-1429574",
          "CSAFPID-1332181"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29976",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29976.json"
        }
      ],
      "title": "CVE-2025-29976"
    },
    {
      "cve": "CVE-2025-30378",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "notes": [
        {
          "category": "other",
          "text": "Deserialization of Untrusted Data",
          "title": "CWE-502"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1770557",
          "CSAFPID-1770558",
          "CSAFPID-1770553",
          "CSAFPID-1770554",
          "CSAFPID-1770547",
          "CSAFPID-1770548",
          "CSAFPID-1770555",
          "CSAFPID-1770556",
          "CSAFPID-1770550",
          "CSAFPID-1770551",
          "CSAFPID-1770552",
          "CSAFPID-1247900",
          "CSAFPID-1300946",
          "CSAFPID-2566619",
          "CSAFPID-1429583",
          "CSAFPID-1770546",
          "CSAFPID-1770545",
          "CSAFPID-1429573",
          "CSAFPID-1429574",
          "CSAFPID-1332181"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30378",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30378.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1770557",
            "CSAFPID-1770558",
            "CSAFPID-1770553",
            "CSAFPID-1770554",
            "CSAFPID-1770547",
            "CSAFPID-1770548",
            "CSAFPID-1770555",
            "CSAFPID-1770556",
            "CSAFPID-1770550",
            "CSAFPID-1770551",
            "CSAFPID-1770552",
            "CSAFPID-1247900",
            "CSAFPID-1300946",
            "CSAFPID-2566619",
            "CSAFPID-1429583",
            "CSAFPID-1770546",
            "CSAFPID-1770545",
            "CSAFPID-1429573",
            "CSAFPID-1429574",
            "CSAFPID-1332181"
          ]
        }
      ],
      "title": "CVE-2025-30378"
    },
    {
      "cve": "CVE-2025-30382",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "notes": [
        {
          "category": "other",
          "text": "Deserialization of Untrusted Data",
          "title": "CWE-502"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1770557",
          "CSAFPID-1770558",
          "CSAFPID-1770553",
          "CSAFPID-1770554",
          "CSAFPID-1770547",
          "CSAFPID-1770548",
          "CSAFPID-1770555",
          "CSAFPID-1770556",
          "CSAFPID-1770550",
          "CSAFPID-1770551",
          "CSAFPID-1770552",
          "CSAFPID-1247900",
          "CSAFPID-1300946",
          "CSAFPID-2566619",
          "CSAFPID-1429583",
          "CSAFPID-1770546",
          "CSAFPID-1770545",
          "CSAFPID-1429573",
          "CSAFPID-1429574",
          "CSAFPID-1332181"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30382",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30382.json"
        }
      ],
      "title": "CVE-2025-30382"
    },
    {
      "cve": "CVE-2025-30384",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "notes": [
        {
          "category": "other",
          "text": "Deserialization of Untrusted Data",
          "title": "CWE-502"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1770557",
          "CSAFPID-1770558",
          "CSAFPID-1770553",
          "CSAFPID-1770554",
          "CSAFPID-1770547",
          "CSAFPID-1770548",
          "CSAFPID-1770555",
          "CSAFPID-1770556",
          "CSAFPID-1770550",
          "CSAFPID-1770551",
          "CSAFPID-1770552",
          "CSAFPID-1247900",
          "CSAFPID-1300946",
          "CSAFPID-2566619",
          "CSAFPID-1429583",
          "CSAFPID-1770546",
          "CSAFPID-1770545",
          "CSAFPID-1429573",
          "CSAFPID-1429574",
          "CSAFPID-1332181"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30384",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30384.json"
        }
      ],
      "title": "CVE-2025-30384"
    },
    {
      "cve": "CVE-2025-29977",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1770557",
          "CSAFPID-1770558",
          "CSAFPID-1770553",
          "CSAFPID-1770554",
          "CSAFPID-1770547",
          "CSAFPID-1770548",
          "CSAFPID-1770555",
          "CSAFPID-1770556",
          "CSAFPID-1770550",
          "CSAFPID-1770551",
          "CSAFPID-1770552",
          "CSAFPID-1247900",
          "CSAFPID-1300946",
          "CSAFPID-2566619",
          "CSAFPID-1429583",
          "CSAFPID-1770546",
          "CSAFPID-1770545",
          "CSAFPID-1429573",
          "CSAFPID-1429574",
          "CSAFPID-1332181"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29977",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29977.json"
        }
      ],
      "title": "CVE-2025-29977"
    },
    {
      "cve": "CVE-2025-29979",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1770557",
          "CSAFPID-1770558",
          "CSAFPID-1770553",
          "CSAFPID-1770554",
          "CSAFPID-1770547",
          "CSAFPID-1770548",
          "CSAFPID-1770555",
          "CSAFPID-1770556",
          "CSAFPID-1770550",
          "CSAFPID-1770551",
          "CSAFPID-1770552",
          "CSAFPID-1247900",
          "CSAFPID-1300946",
          "CSAFPID-2566619",
          "CSAFPID-1429583",
          "CSAFPID-1770546",
          "CSAFPID-1770545",
          "CSAFPID-1429573",
          "CSAFPID-1429574",
          "CSAFPID-1332181"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29979",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29979.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1770557",
            "CSAFPID-1770558",
            "CSAFPID-1770553",
            "CSAFPID-1770554",
            "CSAFPID-1770547",
            "CSAFPID-1770548",
            "CSAFPID-1770555",
            "CSAFPID-1770556",
            "CSAFPID-1770550",
            "CSAFPID-1770551",
            "CSAFPID-1770552",
            "CSAFPID-1247900",
            "CSAFPID-1300946",
            "CSAFPID-2566619",
            "CSAFPID-1429583",
            "CSAFPID-1770546",
            "CSAFPID-1770545",
            "CSAFPID-1429573",
            "CSAFPID-1429574",
            "CSAFPID-1332181"
          ]
        }
      ],
      "title": "CVE-2025-29979"
    },
    {
      "cve": "CVE-2025-30375",
      "cwe": {
        "id": "CWE-843",
        "name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
          "title": "CWE-843"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1770557",
          "CSAFPID-1770558",
          "CSAFPID-1770553",
          "CSAFPID-1770554",
          "CSAFPID-1770547",
          "CSAFPID-1770548",
          "CSAFPID-1770555",
          "CSAFPID-1770556",
          "CSAFPID-1770550",
          "CSAFPID-1770551",
          "CSAFPID-1770552",
          "CSAFPID-1247900",
          "CSAFPID-1300946",
          "CSAFPID-2566619",
          "CSAFPID-1429583",
          "CSAFPID-1770546",
          "CSAFPID-1770545",
          "CSAFPID-1429573",
          "CSAFPID-1429574",
          "CSAFPID-1332181"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30375",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30375.json"
        }
      ],
      "title": "CVE-2025-30375"
    },
    {
      "cve": "CVE-2025-30376",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        },
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1770557",
          "CSAFPID-1770558",
          "CSAFPID-1770553",
          "CSAFPID-1770554",
          "CSAFPID-1770547",
          "CSAFPID-1770548",
          "CSAFPID-1770555",
          "CSAFPID-1770556",
          "CSAFPID-1770550",
          "CSAFPID-1770551",
          "CSAFPID-1770552",
          "CSAFPID-1247900",
          "CSAFPID-1300946",
          "CSAFPID-2566619",
          "CSAFPID-1429583",
          "CSAFPID-1770546",
          "CSAFPID-1770545",
          "CSAFPID-1429573",
          "CSAFPID-1429574",
          "CSAFPID-1332181"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30376",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30376.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1770557",
            "CSAFPID-1770558",
            "CSAFPID-1770553",
            "CSAFPID-1770554",
            "CSAFPID-1770547",
            "CSAFPID-1770548",
            "CSAFPID-1770555",
            "CSAFPID-1770556",
            "CSAFPID-1770550",
            "CSAFPID-1770551",
            "CSAFPID-1770552",
            "CSAFPID-1247900",
            "CSAFPID-1300946",
            "CSAFPID-2566619",
            "CSAFPID-1429583",
            "CSAFPID-1770546",
            "CSAFPID-1770545",
            "CSAFPID-1429573",
            "CSAFPID-1429574",
            "CSAFPID-1332181"
          ]
        }
      ],
      "title": "CVE-2025-30376"
    },
    {
      "cve": "CVE-2025-30379",
      "cwe": {
        "id": "CWE-763",
        "name": "Release of Invalid Pointer or Reference"
      },
      "notes": [
        {
          "category": "other",
          "text": "Release of Invalid Pointer or Reference",
          "title": "CWE-763"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1770557",
          "CSAFPID-1770558",
          "CSAFPID-1770553",
          "CSAFPID-1770554",
          "CSAFPID-1770547",
          "CSAFPID-1770548",
          "CSAFPID-1770555",
          "CSAFPID-1770556",
          "CSAFPID-1770550",
          "CSAFPID-1770551",
          "CSAFPID-1770552",
          "CSAFPID-1247900",
          "CSAFPID-1300946",
          "CSAFPID-2566619",
          "CSAFPID-1429583",
          "CSAFPID-1770546",
          "CSAFPID-1770545",
          "CSAFPID-1429573",
          "CSAFPID-1429574",
          "CSAFPID-1332181"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30379",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30379.json"
        }
      ],
      "title": "CVE-2025-30379"
    },
    {
      "cve": "CVE-2025-30381",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        },
        {
          "category": "other",
          "text": "Untrusted Pointer Dereference",
          "title": "CWE-822"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1770557",
          "CSAFPID-1770558",
          "CSAFPID-1770553",
          "CSAFPID-1770554",
          "CSAFPID-1770547",
          "CSAFPID-1770548",
          "CSAFPID-1770555",
          "CSAFPID-1770556",
          "CSAFPID-1770550",
          "CSAFPID-1770551",
          "CSAFPID-1770552",
          "CSAFPID-1247900",
          "CSAFPID-1300946",
          "CSAFPID-2566619",
          "CSAFPID-1429583",
          "CSAFPID-1770546",
          "CSAFPID-1770545",
          "CSAFPID-1429573",
          "CSAFPID-1429574",
          "CSAFPID-1332181"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30381",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30381.json"
        }
      ],
      "title": "CVE-2025-30381"
    },
    {
      "cve": "CVE-2025-30383",
      "cwe": {
        "id": "CWE-843",
        "name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
          "title": "CWE-843"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1770557",
          "CSAFPID-1770558",
          "CSAFPID-1770553",
          "CSAFPID-1770554",
          "CSAFPID-1770547",
          "CSAFPID-1770548",
          "CSAFPID-1770555",
          "CSAFPID-1770556",
          "CSAFPID-1770550",
          "CSAFPID-1770551",
          "CSAFPID-1770552",
          "CSAFPID-1247900",
          "CSAFPID-1300946",
          "CSAFPID-2566619",
          "CSAFPID-1429583",
          "CSAFPID-1770546",
          "CSAFPID-1770545",
          "CSAFPID-1429573",
          "CSAFPID-1429574",
          "CSAFPID-1332181"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30383",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30383.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1770557",
            "CSAFPID-1770558",
            "CSAFPID-1770553",
            "CSAFPID-1770554",
            "CSAFPID-1770547",
            "CSAFPID-1770548",
            "CSAFPID-1770555",
            "CSAFPID-1770556",
            "CSAFPID-1770550",
            "CSAFPID-1770551",
            "CSAFPID-1770552",
            "CSAFPID-1247900",
            "CSAFPID-1300946",
            "CSAFPID-2566619",
            "CSAFPID-1429583",
            "CSAFPID-1770546",
            "CSAFPID-1770545",
            "CSAFPID-1429573",
            "CSAFPID-1429574",
            "CSAFPID-1332181"
          ]
        }
      ],
      "title": "CVE-2025-30383"
    },
    {
      "cve": "CVE-2025-30377",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1770557",
          "CSAFPID-1770558",
          "CSAFPID-1770553",
          "CSAFPID-1770554",
          "CSAFPID-1770547",
          "CSAFPID-1770548",
          "CSAFPID-1770555",
          "CSAFPID-1770556",
          "CSAFPID-1770550",
          "CSAFPID-1770551",
          "CSAFPID-1770552",
          "CSAFPID-1247900",
          "CSAFPID-1300946",
          "CSAFPID-2566619",
          "CSAFPID-1429583",
          "CSAFPID-1770546",
          "CSAFPID-1770545",
          "CSAFPID-1429573",
          "CSAFPID-1429574",
          "CSAFPID-1332181"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30377",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30377.json"
        }
      ],
      "title": "CVE-2025-30377"
    },
    {
      "cve": "CVE-2025-30386",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1770557",
          "CSAFPID-1770558",
          "CSAFPID-1770553",
          "CSAFPID-1770554",
          "CSAFPID-1770547",
          "CSAFPID-1770548",
          "CSAFPID-1770555",
          "CSAFPID-1770556",
          "CSAFPID-1770550",
          "CSAFPID-1770551",
          "CSAFPID-1770552",
          "CSAFPID-1247900",
          "CSAFPID-1300946",
          "CSAFPID-2566619",
          "CSAFPID-1429583",
          "CSAFPID-1770546",
          "CSAFPID-1770545",
          "CSAFPID-1429573",
          "CSAFPID-1429574",
          "CSAFPID-1332181"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30386",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30386.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1770557",
            "CSAFPID-1770558",
            "CSAFPID-1770553",
            "CSAFPID-1770554",
            "CSAFPID-1770547",
            "CSAFPID-1770548",
            "CSAFPID-1770555",
            "CSAFPID-1770556",
            "CSAFPID-1770550",
            "CSAFPID-1770551",
            "CSAFPID-1770552",
            "CSAFPID-1247900",
            "CSAFPID-1300946",
            "CSAFPID-2566619",
            "CSAFPID-1429583",
            "CSAFPID-1770546",
            "CSAFPID-1770545",
            "CSAFPID-1429573",
            "CSAFPID-1429574",
            "CSAFPID-1332181"
          ]
        }
      ],
      "title": "CVE-2025-30386"
    },
    {
      "cve": "CVE-2025-32704",
      "cwe": {
        "id": "CWE-126",
        "name": "Buffer Over-read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Buffer Over-read",
          "title": "CWE-126"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1770557",
          "CSAFPID-1770558",
          "CSAFPID-1770553",
          "CSAFPID-1770554",
          "CSAFPID-1770547",
          "CSAFPID-1770548",
          "CSAFPID-1770555",
          "CSAFPID-1770556",
          "CSAFPID-1770550",
          "CSAFPID-1770551",
          "CSAFPID-1770552",
          "CSAFPID-1247900",
          "CSAFPID-1300946",
          "CSAFPID-2566619",
          "CSAFPID-1429583",
          "CSAFPID-1770546",
          "CSAFPID-1770545",
          "CSAFPID-1429573",
          "CSAFPID-1429574",
          "CSAFPID-1332181"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-32704",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-32704.json"
        }
      ],
      "title": "CVE-2025-32704"
    },
    {
      "cve": "CVE-2025-29978",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1770557",
          "CSAFPID-1770558",
          "CSAFPID-1770553",
          "CSAFPID-1770554",
          "CSAFPID-1770547",
          "CSAFPID-1770548",
          "CSAFPID-1770555",
          "CSAFPID-1770556",
          "CSAFPID-1770550",
          "CSAFPID-1770551",
          "CSAFPID-1770552",
          "CSAFPID-1247900",
          "CSAFPID-1300946",
          "CSAFPID-2566619",
          "CSAFPID-1429583",
          "CSAFPID-1770546",
          "CSAFPID-1770545",
          "CSAFPID-1429573",
          "CSAFPID-1429574",
          "CSAFPID-1332181"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29978",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29978.json"
        }
      ],
      "title": "CVE-2025-29978"
    },
    {
      "cve": "CVE-2025-30393",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1770557",
          "CSAFPID-1770558",
          "CSAFPID-1770553",
          "CSAFPID-1770554",
          "CSAFPID-1770547",
          "CSAFPID-1770548",
          "CSAFPID-1770555",
          "CSAFPID-1770556",
          "CSAFPID-1770550",
          "CSAFPID-1770551",
          "CSAFPID-1770552",
          "CSAFPID-1247900",
          "CSAFPID-1300946",
          "CSAFPID-2566619",
          "CSAFPID-1429583",
          "CSAFPID-1770546",
          "CSAFPID-1770545",
          "CSAFPID-1429573",
          "CSAFPID-1429574",
          "CSAFPID-1332181"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30393",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30393.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1770557",
            "CSAFPID-1770558",
            "CSAFPID-1770553",
            "CSAFPID-1770554",
            "CSAFPID-1770547",
            "CSAFPID-1770548",
            "CSAFPID-1770555",
            "CSAFPID-1770556",
            "CSAFPID-1770550",
            "CSAFPID-1770551",
            "CSAFPID-1770552",
            "CSAFPID-1247900",
            "CSAFPID-1300946",
            "CSAFPID-2566619",
            "CSAFPID-1429583",
            "CSAFPID-1770546",
            "CSAFPID-1770545",
            "CSAFPID-1429573",
            "CSAFPID-1429574",
            "CSAFPID-1332181"
          ]
        }
      ],
      "title": "CVE-2025-30393"
    },
    {
      "cve": "CVE-2025-32705",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1770557",
          "CSAFPID-1770558",
          "CSAFPID-1770553",
          "CSAFPID-1770554",
          "CSAFPID-1770547",
          "CSAFPID-1770548",
          "CSAFPID-1770555",
          "CSAFPID-1770556",
          "CSAFPID-1770550",
          "CSAFPID-1770551",
          "CSAFPID-1770552",
          "CSAFPID-1247900",
          "CSAFPID-1300946",
          "CSAFPID-2566619",
          "CSAFPID-1429583",
          "CSAFPID-1770546",
          "CSAFPID-1770545",
          "CSAFPID-1429573",
          "CSAFPID-1429574",
          "CSAFPID-1332181"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-32705",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-32705.json"
        }
      ],
      "title": "CVE-2025-32705"
    },
    {
      "cve": "CVE-2025-30388",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1770557",
          "CSAFPID-1770558",
          "CSAFPID-1770553",
          "CSAFPID-1770554",
          "CSAFPID-1770547",
          "CSAFPID-1770548",
          "CSAFPID-1770555",
          "CSAFPID-1770556",
          "CSAFPID-1770550",
          "CSAFPID-1770551",
          "CSAFPID-1770552",
          "CSAFPID-1247900",
          "CSAFPID-1300946",
          "CSAFPID-2566619",
          "CSAFPID-1429583",
          "CSAFPID-1770546",
          "CSAFPID-1770545",
          "CSAFPID-1429573",
          "CSAFPID-1429574",
          "CSAFPID-1332181"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30388",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30388.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1770557",
            "CSAFPID-1770558",
            "CSAFPID-1770553",
            "CSAFPID-1770554",
            "CSAFPID-1770547",
            "CSAFPID-1770548",
            "CSAFPID-1770555",
            "CSAFPID-1770556",
            "CSAFPID-1770550",
            "CSAFPID-1770551",
            "CSAFPID-1770552",
            "CSAFPID-1247900",
            "CSAFPID-1300946",
            "CSAFPID-2566619",
            "CSAFPID-1429583",
            "CSAFPID-1770546",
            "CSAFPID-1770545",
            "CSAFPID-1429573",
            "CSAFPID-1429574",
            "CSAFPID-1332181"
          ]
        }
      ],
      "title": "CVE-2025-30388"
    }
  ]
}

ghsa-9j2q-rv22-36xm

Vulnerability from github

Published

2025-05-13 18:30

Modified

2025-05-13 18:30

Severity ?

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

Heap-based buffer overflow in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2025-30388"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-122",
      "CWE-787"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-05-13T17:16:01Z",
    "severity": "HIGH"
  },
  "details": "Heap-based buffer overflow in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.",
  "id": "GHSA-9j2q-rv22-36xm",
  "modified": "2025-05-13T18:30:57Z",
  "published": "2025-05-13T18:30:57Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-30388"
    },
    {
      "type": "WEB",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30388"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

msrc_cve-2025-30388

Vulnerability from csaf_microsoft

Published

2025-05-13 07:00

Modified

2025-05-14 07:00

Summary

Windows Graphics Component Remote Code Execution Vulnerability

Notes

Additional Resources

To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle

Disclaimer

The information provided in the Microsoft Knowledge Base is provided \"as is\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.

Customer Action

Required. The vulnerability documented by this CVE requires customer action to resolve.

JSON

To clipboard

{
  "document": {
    "acknowledgments": [
      {
        "names": [
          "\u003ca href=\"https://x.com/gaborseljan\"\u003eG\u0026#225;bor Selj\u0026#225;n\u003c/a\u003e with \u003ca href=\"https://checkpoint.com/\"\u003eCheck Point\u003c/a\u003e"
        ]
      }
    ],
    "aggregate_severity": {
      "namespace": "https://www.microsoft.com/en-us/msrc/security-update-severity-rating-system",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Public",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "general",
        "text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
        "title": "Disclaimer"
      },
      {
        "category": "general",
        "text": "Required. The vulnerability documented by this CVE requires customer action to resolve.",
        "title": "Customer Action"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "secure@microsoft.com",
      "name": "Microsoft Security Response Center",
      "namespace": "https://msrc.microsoft.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "CVE-2025-30388 Windows Graphics Component Remote Code Execution Vulnerability - HTML",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30388"
      },
      {
        "category": "self",
        "summary": "CVE-2025-30388 Windows Graphics Component Remote Code Execution Vulnerability - CSAF",
        "url": "https://msrc.microsoft.com/csaf/advisories/2025/msrc_cve-2025-30388.json"
      },
      {
        "category": "external",
        "summary": "Microsoft Exploitability Index",
        "url": "https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1"
      },
      {
        "category": "external",
        "summary": "Microsoft Support Lifecycle",
        "url": "https://support.microsoft.com/lifecycle"
      },
      {
        "category": "external",
        "summary": "Common Vulnerability Scoring System",
        "url": "https://www.first.org/cvss"
      }
    ],
    "title": "Windows Graphics Component Remote Code Execution Vulnerability",
    "tracking": {
      "current_release_date": "2025-05-14T07:00:00.000Z",
      "generator": {
        "date": "2025-09-10T00:09:05.434Z",
        "engine": {
          "name": "MSRC Generator",
          "version": "1.0"
        }
      },
      "id": "msrc_CVE-2025-30388",
      "initial_release_date": "2025-05-13T07:00:00.000Z",
      "revision_history": [
        {
          "date": "2025-05-13T07:00:00.000Z",
          "legacy_version": "1",
          "number": "1",
          "summary": "Information published."
        },
        {
          "date": "2025-05-14T07:00:00.000Z",
          "legacy_version": "2",
          "number": "2",
          "summary": "Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links."
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c16.97.25042725",
            "product": {
              "name": "Microsoft Office LTSC for Mac 2021 \u003c16.97.25042725",
              "product_id": "16"
            }
          },
          {
            "category": "product_version",
            "name": "16.97.25042725",
            "product": {
              "name": "Microsoft Office LTSC for Mac 2021 16.97.25042725",
              "product_id": "11951"
            }
          }
        ],
        "category": "product_name",
        "name": "Microsoft Office LTSC for Mac 2021"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c16.0.18827.20000",
            "product": {
              "name": "Microsoft Office for Android \u003c16.0.18827.20000",
              "product_id": "10"
            }
          },
          {
            "category": "product_version",
            "name": "16.0.18827.20000",
            "product": {
              "name": "Microsoft Office for Android 16.0.18827.20000",
              "product_id": "12155"
            }
          }
        ],
        "category": "product_name",
        "name": "Microsoft Office for Android"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c16.0.14326.22502",
            "product": {
              "name": "Microsoft Office for Universal \u003c16.0.14326.22502",
              "product_id": "9"
            }
          },
          {
            "category": "product_version",
            "name": "16.0.14326.22502",
            "product": {
              "name": "Microsoft Office for Universal 16.0.14326.22502",
              "product_id": "12156"
            }
          }
        ],
        "category": "product_name",
        "name": "Microsoft Office for Universal"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c16.97.25042725",
            "product": {
              "name": "Microsoft Office LTSC for Mac 2024 \u003c16.97.25042725",
              "product_id": "1"
            }
          },
          {
            "category": "product_version",
            "name": "16.97.25042725",
            "product": {
              "name": "Microsoft Office LTSC for Mac 2024 16.97.25042725",
              "product_id": "12440"
            }
          }
        ],
        "category": "product_name",
        "name": "Microsoft Office LTSC for Mac 2024"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.17763.7314",
            "product": {
              "name": "Windows 10 Version 1809 for 32-bit Systems \u003c10.0.17763.7314",
              "product_id": "25"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.17763.7314",
            "product": {
              "name": "Windows 10 Version 1809 for 32-bit Systems 10.0.17763.7314",
              "product_id": "11568"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 1809 for 32-bit Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.17763.7314",
            "product": {
              "name": "Windows 10 Version 1809 for x64-based Systems \u003c10.0.17763.7314",
              "product_id": "24"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.17763.7314",
            "product": {
              "name": "Windows 10 Version 1809 for x64-based Systems 10.0.17763.7314",
              "product_id": "11569"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 1809 for x64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.17763.7314",
            "product": {
              "name": "Windows Server 2019 \u003c10.0.17763.7314",
              "product_id": "23"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.17763.7314",
            "product": {
              "name": "Windows Server 2019 10.0.17763.7314",
              "product_id": "11571"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2019"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.17763.7314",
            "product": {
              "name": "Windows Server 2019 (Server Core installation) \u003c10.0.17763.7314",
              "product_id": "22"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.17763.7314",
            "product": {
              "name": "Windows Server 2019 (Server Core installation) 10.0.17763.7314",
              "product_id": "11572"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2019 (Server Core installation)"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.20348.3692",
            "product": {
              "name": "Windows Server 2022 \u003c10.0.20348.3692",
              "product_id": "21"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.20348.3692",
            "product": {
              "name": "Windows Server 2022 10.0.20348.3692",
              "product_id": "11923"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2022"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.20348.3692",
            "product": {
              "name": "Windows Server 2022 (Server Core installation) \u003c10.0.20348.3692",
              "product_id": "20"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.20348.3692",
            "product": {
              "name": "Windows Server 2022 (Server Core installation) 10.0.20348.3692",
              "product_id": "11924"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2022 (Server Core installation)"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.19044.5854",
            "product": {
              "name": "Windows 10 Version 21H2 for 32-bit Systems \u003c10.0.19044.5854",
              "product_id": "19"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.19044.5854",
            "product": {
              "name": "Windows 10 Version 21H2 for 32-bit Systems 10.0.19044.5854",
              "product_id": "11929"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 21H2 for 32-bit Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.19044.5854",
            "product": {
              "name": "Windows 10 Version 21H2 for ARM64-based Systems \u003c10.0.19044.5854",
              "product_id": "18"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.19044.5854",
            "product": {
              "name": "Windows 10 Version 21H2 for ARM64-based Systems 10.0.19044.5854",
              "product_id": "11930"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 21H2 for ARM64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.19044.5854",
            "product": {
              "name": "Windows 10 Version 21H2 for x64-based Systems \u003c10.0.19044.5854",
              "product_id": "17"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.19044.5854",
            "product": {
              "name": "Windows 10 Version 21H2 for x64-based Systems 10.0.19044.5854",
              "product_id": "11931"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 21H2 for x64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.22621.5335",
            "product": {
              "name": "Windows 11 Version 22H2 for ARM64-based Systems \u003c10.0.22621.5335",
              "product_id": "15"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.22621.5335",
            "product": {
              "name": "Windows 11 Version 22H2 for ARM64-based Systems 10.0.22621.5335",
              "product_id": "12085"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 11 Version 22H2 for ARM64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.22621.5335",
            "product": {
              "name": "Windows 11 Version 22H2 for x64-based Systems \u003c10.0.22621.5335",
              "product_id": "14"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.22621.5335",
            "product": {
              "name": "Windows 11 Version 22H2 for x64-based Systems 10.0.22621.5335",
              "product_id": "12086"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 11 Version 22H2 for x64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.19045.5854",
            "product": {
              "name": "Windows 10 Version 22H2 for x64-based Systems \u003c10.0.19045.5854",
              "product_id": "13"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.19045.5854",
            "product": {
              "name": "Windows 10 Version 22H2 for x64-based Systems 10.0.19045.5854",
              "product_id": "12097"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 22H2 for x64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.19045.5854",
            "product": {
              "name": "Windows 10 Version 22H2 for ARM64-based Systems \u003c10.0.19045.5854",
              "product_id": "12"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.19045.5854",
            "product": {
              "name": "Windows 10 Version 22H2 for ARM64-based Systems 10.0.19045.5854",
              "product_id": "12098"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 22H2 for ARM64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.19045.5854",
            "product": {
              "name": "Windows 10 Version 22H2 for 32-bit Systems \u003c10.0.19045.5854",
              "product_id": "11"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.19045.5854",
            "product": {
              "name": "Windows 10 Version 22H2 for 32-bit Systems 10.0.19045.5854",
              "product_id": "12099"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 22H2 for 32-bit Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.26100.4061",
            "product": {
              "name": "Windows Server 2025 (Server Core installation) \u003c10.0.26100.4061",
              "product_id": "2"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.26100.4061",
            "product": {
              "name": "Windows Server 2025 (Server Core installation) 10.0.26100.4061",
              "product_id": "12437"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2025 (Server Core installation)"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.22631.5335",
            "product": {
              "name": "Windows 11 Version 23H2 for ARM64-based Systems \u003c10.0.22631.5335",
              "product_id": "8"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.22631.5335",
            "product": {
              "name": "Windows 11 Version 23H2 for ARM64-based Systems 10.0.22631.5335",
              "product_id": "12242"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 11 Version 23H2 for ARM64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.22631.5335",
            "product": {
              "name": "Windows 11 Version 23H2 for x64-based Systems \u003c10.0.22631.5335",
              "product_id": "7"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.22631.5335",
            "product": {
              "name": "Windows 11 Version 23H2 for x64-based Systems 10.0.22631.5335",
              "product_id": "12243"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 11 Version 23H2 for x64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.25398.1611",
            "product": {
              "name": "Windows Server 2022, 23H2 Edition (Server Core installation) \u003c10.0.25398.1611",
              "product_id": "6"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.25398.1611",
            "product": {
              "name": "Windows Server 2022, 23H2 Edition (Server Core installation) 10.0.25398.1611",
              "product_id": "12244"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2022, 23H2 Edition (Server Core installation)"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.26100.4061",
            "product": {
              "name": "Windows 11 Version 24H2 for ARM64-based Systems \u003c10.0.26100.4061",
              "product_id": "5"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.26100.4061",
            "product": {
              "name": "Windows 11 Version 24H2 for ARM64-based Systems 10.0.26100.4061",
              "product_id": "12389"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 11 Version 24H2 for ARM64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.26100.4061",
            "product": {
              "name": "Windows 11 Version 24H2 for x64-based Systems \u003c10.0.26100.4061",
              "product_id": "4"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.26100.4061",
            "product": {
              "name": "Windows 11 Version 24H2 for x64-based Systems 10.0.26100.4061",
              "product_id": "12390"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 11 Version 24H2 for x64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.26100.4061",
            "product": {
              "name": "Windows Server 2025 \u003c10.0.26100.4061",
              "product_id": "3"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.26100.4061",
            "product": {
              "name": "Windows Server 2025 10.0.26100.4061",
              "product_id": "12436"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2025"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.10240.21014",
            "product": {
              "name": "Windows 10 for 32-bit Systems \u003c10.0.10240.21014",
              "product_id": "31"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.10240.21014",
            "product": {
              "name": "Windows 10 for 32-bit Systems 10.0.10240.21014",
              "product_id": "10729"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 for 32-bit Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.10240.21014",
            "product": {
              "name": "Windows 10 for x64-based Systems \u003c10.0.10240.21014",
              "product_id": "30"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.10240.21014",
            "product": {
              "name": "Windows 10 for x64-based Systems 10.0.10240.21014",
              "product_id": "10735"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 for x64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.14393.8066",
            "product": {
              "name": "Windows 10 Version 1607 for 32-bit Systems \u003c10.0.14393.8066",
              "product_id": "28"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.14393.8066",
            "product": {
              "name": "Windows 10 Version 1607 for 32-bit Systems 10.0.14393.8066",
              "product_id": "10852"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 1607 for 32-bit Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.14393.8066",
            "product": {
              "name": "Windows 10 Version 1607 for x64-based Systems \u003c10.0.14393.8066",
              "product_id": "27"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.14393.8066",
            "product": {
              "name": "Windows 10 Version 1607 for x64-based Systems 10.0.14393.8066",
              "product_id": "10853"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 1607 for x64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.14393.8066",
            "product": {
              "name": "Windows Server 2016 \u003c10.0.14393.8066",
              "product_id": "29"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.14393.8066",
            "product": {
              "name": "Windows Server 2016 10.0.14393.8066",
              "product_id": "10816"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2016"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.14393.8066",
            "product": {
              "name": "Windows Server 2016 (Server Core installation) \u003c10.0.14393.8066",
              "product_id": "26"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.14393.8066",
            "product": {
              "name": "Windows Server 2016 (Server Core installation) 10.0.14393.8066",
              "product_id": "10855"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2016 (Server Core installation)"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c6.0.6003.23279",
            "product": {
              "name": "Windows Server 2008 for 32-bit Systems Service Pack 2 \u003c6.0.6003.23279",
              "product_id": "41"
            }
          },
          {
            "category": "product_version",
            "name": "6.0.6003.23279",
            "product": {
              "name": "Windows Server 2008 for 32-bit Systems Service Pack 2 6.0.6003.23279",
              "product_id": "9312"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2008 for 32-bit Systems Service Pack 2"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c6.0.6003.23279",
            "product": {
              "name": "Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) \u003c6.0.6003.23279",
              "product_id": "36"
            }
          },
          {
            "category": "product_version",
            "name": "6.0.6003.23279",
            "product": {
              "name": "Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) 6.0.6003.23279",
              "product_id": "10287"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c6.0.6003.23279",
            "product": {
              "name": "Windows Server 2008 for x64-based Systems Service Pack 2 \u003c6.0.6003.23279",
              "product_id": "40"
            }
          },
          {
            "category": "product_version",
            "name": "6.0.6003.23279",
            "product": {
              "name": "Windows Server 2008 for x64-based Systems Service Pack 2 6.0.6003.23279",
              "product_id": "9318"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2008 for x64-based Systems Service Pack 2"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c6.0.6003.23279",
            "product": {
              "name": "Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) \u003c6.0.6003.23279",
              "product_id": "39"
            }
          },
          {
            "category": "product_version",
            "name": "6.0.6003.23279",
            "product": {
              "name": "Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) 6.0.6003.23279",
              "product_id": "9344"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c6.1.7601.27729",
            "product": {
              "name": "Windows Server 2008 R2 for x64-based Systems Service Pack 1 \u003c6.1.7601.27729",
              "product_id": "37"
            }
          },
          {
            "category": "product_version",
            "name": "6.1.7601.27729",
            "product": {
              "name": "Windows Server 2008 R2 for x64-based Systems Service Pack 1 6.1.7601.27729",
              "product_id": "10051"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2008 R2 for x64-based Systems Service Pack 1"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c6.1.7601.27729",
            "product": {
              "name": "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) \u003c6.1.7601.27729",
              "product_id": "38"
            }
          },
          {
            "category": "product_version",
            "name": "6.1.7601.27729",
            "product": {
              "name": "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) 6.1.7601.27729",
              "product_id": "10049"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c6.2.9200.25475",
            "product": {
              "name": "Windows Server 2012 \u003c6.2.9200.25475",
              "product_id": "35"
            }
          },
          {
            "category": "product_version",
            "name": "6.2.9200.25475",
            "product": {
              "name": "Windows Server 2012 6.2.9200.25475",
              "product_id": "10378"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2012"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c6.2.9200.25475",
            "product": {
              "name": "Windows Server 2012 (Server Core installation) \u003c6.2.9200.25475",
              "product_id": "34"
            }
          },
          {
            "category": "product_version",
            "name": "6.2.9200.25475",
            "product": {
              "name": "Windows Server 2012 (Server Core installation) 6.2.9200.25475",
              "product_id": "10379"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2012 (Server Core installation)"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c6.3.9600.22577",
            "product": {
              "name": "Windows Server 2012 R2 \u003c6.3.9600.22577",
              "product_id": "33"
            }
          },
          {
            "category": "product_version",
            "name": "6.3.9600.22577",
            "product": {
              "name": "Windows Server 2012 R2 6.3.9600.22577",
              "product_id": "10483"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2012 R2"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c6.3.9600.22577",
            "product": {
              "name": "Windows Server 2012 R2 (Server Core installation) \u003c6.3.9600.22577",
              "product_id": "32"
            }
          },
          {
            "category": "product_version",
            "name": "6.3.9600.22577",
            "product": {
              "name": "Windows Server 2012 R2 (Server Core installation) 6.3.9600.22577",
              "product_id": "10543"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Server 2012 R2 (Server Core installation)"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-30388",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "general",
          "text": "Microsoft",
          "title": "Assigning CNA"
        },
        {
          "category": "faq",
          "text": "The word Remote in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally.\nFor example, when the score indicates that the Attack Vector is Local and User Interaction is Required, this could describe an exploit in which an attacker, through social engineering, convinces a victim to download and open a specially crafted file from a website which leads to a local attack on their computer.",
          "title": "According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?"
        },
        {
          "category": "faq",
          "text": "Yes. As of May 14, 2025, the security update for Microsoft Office LTSC for Mac 2021 and 2024 are available. Customers running Microsoft Office LTSC for Mac 2021 and 2024 should ensure the update is installed to be protected from this vulnerability.",
          "title": "Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?"
        }
      ],
      "product_status": {
        "fixed": [
          "9312",
          "9318",
          "9344",
          "10049",
          "10051",
          "10287",
          "10378",
          "10379",
          "10483",
          "10543",
          "10729",
          "10735",
          "10816",
          "10852",
          "10853",
          "10855",
          "11568",
          "11569",
          "11571",
          "11572",
          "11923",
          "11924",
          "11929",
          "11930",
          "11931",
          "11951",
          "12085",
          "12086",
          "12097",
          "12098",
          "12099",
          "12155",
          "12156",
          "12242",
          "12243",
          "12244",
          "12389",
          "12390",
          "12436",
          "12437",
          "12440"
        ],
        "known_affected": [
          "1",
          "2",
          "3",
          "4",
          "5",
          "6",
          "7",
          "8",
          "9",
          "10",
          "11",
          "12",
          "13",
          "14",
          "15",
          "16",
          "17",
          "18",
          "19",
          "20",
          "21",
          "22",
          "23",
          "24",
          "25",
          "26",
          "27",
          "28",
          "29",
          "30",
          "31",
          "32",
          "33",
          "34",
          "35",
          "36",
          "37",
          "38",
          "39",
          "40",
          "41"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30388 Windows Graphics Component Remote Code Execution Vulnerability - HTML",
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30388"
        },
        {
          "category": "self",
          "summary": "CVE-2025-30388 Windows Graphics Component Remote Code Execution Vulnerability - CSAF",
          "url": "https://msrc.microsoft.com/csaf/advisories/2025/msrc_cve-2025-30388.json"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-05-13T07:00:00.000Z",
          "details": "16.97.25042725:Security Update:https://go.microsoft.com/fwlink/p/?linkid=831049",
          "product_ids": [
            "16",
            "1"
          ],
          "url": "https://go.microsoft.com/fwlink/p/?linkid=831049"
        },
        {
          "category": "vendor_fix",
          "date": "2025-05-13T07:00:00.000Z",
          "details": "16.0.18827.20000:Security Update:https://support.google.com/googleplay/answer/113412?hl=en",
          "product_ids": [
            "10"
          ],
          "url": "https://support.google.com/googleplay/answer/113412?hl=en"
        },
        {
          "category": "vendor_fix",
          "date": "2025-05-13T07:00:00.000Z",
          "details": "16.0.14326.22502:Security Update:https://support.microsoft.com/en-us/account-billing/get-updates-for-apps-and-games-in-microsoft-store-a1fe19c0-532d-ec47-7035-d1c5a1dd464f",
          "product_ids": [
            "9"
          ],
          "url": "https://support.microsoft.com/en-us/account-billing/get-updates-for-apps-and-games-in-microsoft-store-a1fe19c0-532d-ec47-7035-d1c5a1dd464f"
        },
        {
          "category": "vendor_fix",
          "date": "2025-05-13T07:00:00.000Z",
          "details": "10.0.17763.7314:Security Update:https://support.microsoft.com/help/5058392",
          "product_ids": [
            "25",
            "24",
            "23",
            "22"
          ],
          "url": "https://support.microsoft.com/help/5058392"
        },
        {
          "category": "vendor_fix",
          "date": "2025-05-13T07:00:00.000Z",
          "details": "10.0.20348.3692:Security Update:https://support.microsoft.com/help/5058385",
          "product_ids": [
            "21",
            "20"
          ],
          "url": "https://support.microsoft.com/help/5058385"
        },
        {
          "category": "vendor_fix",
          "date": "2025-05-13T07:00:00.000Z",
          "details": "10.0.20348.3630:SecurityHotpatchUpdate:https://support.microsoft.com/help/5058500",
          "product_ids": [
            "21"
          ],
          "url": "https://support.microsoft.com/help/5058500"
        },
        {
          "category": "vendor_fix",
          "date": "2025-05-13T07:00:00.000Z",
          "details": "10.0.19044.5854:Security Update:https://support.microsoft.com/help/5058379",
          "product_ids": [
            "19",
            "18",
            "17"
          ],
          "url": "https://support.microsoft.com/help/5058379"
        },
        {
          "category": "vendor_fix",
          "date": "2025-05-13T07:00:00.000Z",
          "details": "10.0.22621.5335:Security Update:https://support.microsoft.com/help/5058405",
          "product_ids": [
            "15",
            "14"
          ],
          "url": "https://support.microsoft.com/help/5058405"
        },
        {
          "category": "vendor_fix",
          "date": "2025-05-13T07:00:00.000Z",
          "details": "10.0.19045.5854:Security Update:https://support.microsoft.com/help/5058379",
          "product_ids": [
            "13",
            "12",
            "11"
          ],
          "url": "https://support.microsoft.com/help/5058379"
        },
        {
          "category": "vendor_fix",
          "date": "2025-05-13T07:00:00.000Z",
          "details": "10.0.26100.4061:Security Update:https://support.microsoft.com/help/5058411",
          "product_ids": [
            "2",
            "5",
            "4",
            "3"
          ],
          "url": "https://support.microsoft.com/help/5058411"
        },
        {
          "category": "vendor_fix",
          "date": "2025-05-13T07:00:00.000Z",
          "details": "10.0.26100.3981:SecurityHotpatchUpdate:https://support.microsoft.com/help/5058497",
          "product_ids": [
            "2",
            "5",
            "4",
            "3"
          ],
          "url": "https://support.microsoft.com/help/5058497"
        },
        {
          "category": "vendor_fix",
          "date": "2025-05-13T07:00:00.000Z",
          "details": "10.0.22631.5335:Security Update:https://support.microsoft.com/help/5058405",
          "product_ids": [
            "8",
            "7"
          ],
          "url": "https://support.microsoft.com/help/5058405"
        },
        {
          "category": "vendor_fix",
          "date": "2025-05-13T07:00:00.000Z",
          "details": "10.0.25398.1611:Security Update:https://support.microsoft.com/help/5058384",
          "product_ids": [
            "6"
          ],
          "url": "https://support.microsoft.com/help/5058384"
        },
        {
          "category": "vendor_fix",
          "date": "2025-05-13T07:00:00.000Z",
          "details": "10.0.10240.21014:Security Update:https://support.microsoft.com/help/5058387",
          "product_ids": [
            "31",
            "30"
          ],
          "url": "https://support.microsoft.com/help/5058387"
        },
        {
          "category": "vendor_fix",
          "date": "2025-05-13T07:00:00.000Z",
          "details": "10.0.14393.8066:Security Update:https://support.microsoft.com/help/5058383",
          "product_ids": [
            "28",
            "27",
            "29",
            "26"
          ],
          "url": "https://support.microsoft.com/help/5058383"
        },
        {
          "category": "vendor_fix",
          "date": "2025-05-13T07:00:00.000Z",
          "details": "6.0.6003.23279:Monthly Rollup:https://support.microsoft.com/help/5058449",
          "product_ids": [
            "41",
            "36",
            "40",
            "39"
          ],
          "url": "https://support.microsoft.com/help/5058449"
        },
        {
          "category": "vendor_fix",
          "date": "2025-05-13T07:00:00.000Z",
          "details": "6.0.6003.23279:Security Only:https://support.microsoft.com/help/5058429",
          "product_ids": [
            "41",
            "36",
            "40",
            "39"
          ],
          "url": "https://support.microsoft.com/help/5058429"
        },
        {
          "category": "vendor_fix",
          "date": "2025-05-13T07:00:00.000Z",
          "details": "6.1.7601.27729:Monthly Rollup:https://support.microsoft.com/help/5058430",
          "product_ids": [
            "37",
            "38"
          ],
          "url": "https://support.microsoft.com/help/5058430"
        },
        {
          "category": "vendor_fix",
          "date": "2025-05-13T07:00:00.000Z",
          "details": "6.1.7601.27729:Security Only:https://support.microsoft.com/help/5058454",
          "product_ids": [
            "37",
            "38"
          ],
          "url": "https://support.microsoft.com/help/5058454"
        },
        {
          "category": "vendor_fix",
          "date": "2025-05-13T07:00:00.000Z",
          "details": "6.2.9200.25475:Monthly Rollup:https://support.microsoft.com/help/5058451",
          "product_ids": [
            "35",
            "34"
          ],
          "url": "https://support.microsoft.com/help/5058451"
        },
        {
          "category": "vendor_fix",
          "date": "2025-05-13T07:00:00.000Z",
          "details": "6.3.9600.22577:Monthly Rollup:https://support.microsoft.com/help/5058403",
          "product_ids": [
            "33",
            "32"
          ],
          "url": "https://support.microsoft.com/help/5058403"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "environmentalsScore": 0.0,
            "exploitCodeMaturity": "UNPROVEN",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "remediationLevel": "OFFICIAL_FIX",
            "reportConfidence": "CONFIRMED",
            "scope": "UNCHANGED",
            "temporalScore": 6.8,
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1",
            "2",
            "3",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "12",
            "13",
            "14",
            "15",
            "16",
            "17",
            "18",
            "19",
            "20",
            "21",
            "22",
            "23",
            "24",
            "25",
            "26",
            "27",
            "28",
            "29",
            "30",
            "31",
            "32",
            "33",
            "34",
            "35",
            "36",
            "37",
            "38",
            "39",
            "40",
            "41"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Remote Code Execution"
        },
        {
          "category": "exploit_status",
          "details": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely"
        }
      ],
      "title": "Windows Graphics Component Remote Code Execution Vulnerability"
    }
  ]
}

CERTFR-2025-AVI-0404

Vulnerability from certfr_avis

De multiples vulnérabilités ont été découvertes dans Microsoft Office. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
Microsoft	Office	Microsoft Office LTSC 2021 pour éditions 64 bits
Microsoft	Office	Microsoft Office 2016 (édition 32 bits) versions antérieures à 16.0.5500.1000
Microsoft	Office	Microsoft Excel 2016 (édition 64 bits) versions antérieures à 16.0.5500.1000
Microsoft	Office	Microsoft Office LTSC 2021 pour éditions 32 bits
Microsoft	Office	Microsoft Excel 2016 (édition 32 bits) versions antérieures à 16.0.5500.1001
Microsoft	Office	Microsoft Office 2016 (édition 64 bits) versions antérieures à 16.0.5500.1000
Microsoft	Office	Microsoft Office LTSC pour Mac 2024 versions antérieures à 16.97.25042725
Microsoft	Office	Microsoft Office LTSC pour Mac 2021 versions antérieures à 16.97.25042725
Microsoft	Office	Microsoft Office 2019 pour éditions 32 bits
Microsoft	Office	Microsoft 365 Apps pour Enterprise pour systèmes 64 bits
Microsoft	Office	Microsoft Office 2019 pour éditions 64 bits
Microsoft	Office	Microsoft Office LTSC 2024 pour éditions 64 bits
Microsoft	Office	Microsoft Excel 2016 (édition 32 bits) versions antérieures à 16.0.5500.1000
Microsoft	Office	Microsoft Excel 2016 (édition 64 bits) versions antérieures à 16.0.5500.1001
Microsoft	Office	Microsoft Office pour Universal versions antérieures à 16.0.14326.22502
Microsoft	Office	Microsoft Office 2016 (édition 32 bits) versions antérieures à 16.0.5500.1002
Microsoft	Office	Office Online Server versions antérieures à 16.0.10417.20010
Microsoft	Office	Microsoft Office 2016 (édition 64 bits) versions antérieures à 16.0.5500.1002
Microsoft	Office	Microsoft Office pour Android versions antérieures à 16.0.18827.20000
Microsoft	Office	Microsoft Office LTSC 2024 pour éditions 32 bits
Microsoft	Office	Microsoft 365 Apps pour Enterprise pour systèmes 32 bits

References

Title

Publication Time

Tags

Bulletin de sécurité Microsoft Office CVE-2025-30375	2025-05-13	vendor-advisory
Bulletin de sécurité Microsoft Office CVE-2025-30377	2025-05-13	vendor-advisory
Bulletin de sécurité Microsoft Office CVE-2025-30379	2025-05-13	vendor-advisory
Bulletin de sécurité Microsoft Office CVE-2025-30381	2025-05-13	vendor-advisory
Bulletin de sécurité Microsoft Office CVE-2025-29979	2025-05-13	vendor-advisory
Bulletin de sécurité Microsoft Office CVE-2025-30393	2025-05-13	vendor-advisory
Bulletin de sécurité Microsoft Office CVE-2025-29978	2025-05-13	vendor-advisory
Bulletin de sécurité Microsoft Office CVE-2025-29977	2025-05-13	vendor-advisory
Bulletin de sécurité Microsoft Office CVE-2025-30383	2025-05-13	vendor-advisory
Bulletin de sécurité Microsoft Office CVE-2025-32704	2025-05-13	vendor-advisory
Bulletin de sécurité Microsoft Office CVE-2025-30386	2025-05-13	vendor-advisory
Bulletin de sécurité Microsoft Office CVE-2025-32705	2025-05-13	vendor-advisory
Bulletin de sécurité Microsoft Office CVE-2025-30388	2025-05-13	vendor-advisory
Bulletin de sécurité Microsoft Office CVE-2025-30376	2025-05-13	vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Microsoft Office LTSC 2021 pour \u00e9ditions 64 bits",
      "product": {
        "name": "Office",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Office 2016 (\u00e9dition 32 bits) versions ant\u00e9rieures \u00e0 16.0.5500.1000",
      "product": {
        "name": "Office",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Excel 2016 (\u00e9dition 64 bits) versions ant\u00e9rieures \u00e0 16.0.5500.1000",
      "product": {
        "name": "Office",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Office LTSC 2021 pour \u00e9ditions 32 bits",
      "product": {
        "name": "Office",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Excel 2016 (\u00e9dition 32 bits) versions ant\u00e9rieures \u00e0 16.0.5500.1001",
      "product": {
        "name": "Office",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Office 2016 (\u00e9dition 64 bits) versions ant\u00e9rieures \u00e0 16.0.5500.1000",
      "product": {
        "name": "Office",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Office LTSC pour Mac 2024 versions ant\u00e9rieures \u00e0 16.97.25042725",
      "product": {
        "name": "Office",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Office LTSC pour Mac 2021 versions ant\u00e9rieures \u00e0 16.97.25042725",
      "product": {
        "name": "Office",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Office 2019 pour \u00e9ditions 32 bits",
      "product": {
        "name": "Office",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft 365 Apps pour Enterprise pour syst\u00e8mes 64 bits",
      "product": {
        "name": "Office",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Office 2019 pour \u00e9ditions 64 bits",
      "product": {
        "name": "Office",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Office LTSC 2024 pour \u00e9ditions 64 bits",
      "product": {
        "name": "Office",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Excel 2016 (\u00e9dition 32 bits) versions ant\u00e9rieures \u00e0 16.0.5500.1000",
      "product": {
        "name": "Office",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Excel 2016 (\u00e9dition 64 bits) versions ant\u00e9rieures \u00e0 16.0.5500.1001",
      "product": {
        "name": "Office",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Office pour Universal versions ant\u00e9rieures \u00e0 16.0.14326.22502",
      "product": {
        "name": "Office",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Office 2016 (\u00e9dition 32 bits) versions ant\u00e9rieures \u00e0 16.0.5500.1002",
      "product": {
        "name": "Office",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Office Online Server versions ant\u00e9rieures \u00e0 16.0.10417.20010",
      "product": {
        "name": "Office",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Office 2016 (\u00e9dition 64 bits) versions ant\u00e9rieures \u00e0 16.0.5500.1002",
      "product": {
        "name": "Office",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Office pour Android versions ant\u00e9rieures \u00e0 16.0.18827.20000",
      "product": {
        "name": "Office",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Office LTSC 2024 pour \u00e9ditions 32 bits",
      "product": {
        "name": "Office",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft 365 Apps pour Enterprise pour syst\u00e8mes 32 bits",
      "product": {
        "name": "Office",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2025-32704",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-32704"
    },
    {
      "name": "CVE-2025-30377",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-30377"
    },
    {
      "name": "CVE-2025-29979",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-29979"
    },
    {
      "name": "CVE-2025-30381",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-30381"
    },
    {
      "name": "CVE-2025-29977",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-29977"
    },
    {
      "name": "CVE-2025-30386",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-30386"
    },
    {
      "name": "CVE-2025-29978",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-29978"
    },
    {
      "name": "CVE-2025-30376",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-30376"
    },
    {
      "name": "CVE-2025-30379",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-30379"
    },
    {
      "name": "CVE-2025-32705",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-32705"
    },
    {
      "name": "CVE-2025-30375",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-30375"
    },
    {
      "name": "CVE-2025-30393",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-30393"
    },
    {
      "name": "CVE-2025-30388",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-30388"
    },
    {
      "name": "CVE-2025-30383",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-30383"
    }
  ],
  "initial_release_date": "2025-05-14T00:00:00",
  "last_revision_date": "2025-05-14T00:00:00",
  "links": [],
  "reference": "CERTFR-2025-AVI-0404",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2025-05-14T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Microsoft Office. Elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Microsoft Office",
  "vendor_advisories": [
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Office CVE-2025-30375",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30375"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Office CVE-2025-30377",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30377"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Office CVE-2025-30379",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30379"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Office CVE-2025-30381",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30381"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Office CVE-2025-29979",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29979"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Office CVE-2025-30393",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30393"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Office CVE-2025-29978",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29978"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Office CVE-2025-29977",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29977"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Office CVE-2025-30383",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30383"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Office CVE-2025-32704",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-32704"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Office CVE-2025-30386",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30386"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Office CVE-2025-32705",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-32705"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Office CVE-2025-30388",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30388"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Office CVE-2025-30376",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30376"
    }
  ]
}

CERTFR-2025-AVI-0405

Vulnerability from certfr_avis

De multiples vulnérabilités ont été découvertes dans Microsoft Windows. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.

Microsoft indique que les vulnérabilités CVE-2025-30397, CVE-2025-30400, CVE-2025-32701, CVE-2025-32706 et CVE-2025-32709 sont activement exploitées.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
Microsoft	N/A	Windows Server 2012 R2 versions antérieures à 6.3.9600.22577
Microsoft	N/A	Windows HLK Version 1809 versions antérieures à 10.1.17763.7010
Microsoft	N/A	Windows Server 2012 (Server Core installation) versions antérieures à 1.003
Microsoft	N/A	Windows 10 Version 1809 pour systèmes 32 bits versions antérieures à 10.0.17763.7314
Microsoft	N/A	Windows App Client pour Windows Desktop versions antérieures à 2.0.420
Microsoft	N/A	Windows Server 2019 versions antérieures à 10.0.17763.7314
Microsoft	N/A	Windows 10 Version 1809 pour systèmes x64 versions antérieures à 10.0.17763.7314
Microsoft	N/A	Windows 11 Version 22H2 pour systèmes x64 versions antérieures à 10.0.22621.5335
Microsoft	N/A	Windows 10 HLK version 20H2 antérieures à 10.1.19041.5609
Microsoft	N/A	Windows Server 2008 R2 pour systèmes x64 Service Pack 1 versions antérieures à 1.003
Microsoft	N/A	Windows HLK pour Windows 10 version 2004 antérieures à 10.1.19041.5609
Microsoft	N/A	Windows Server 2008 R2 pour systèmes x64 Service Pack 1 (Server Core installation) versions antérieures à 1.003
Microsoft	N/A	Windows 11 HLK 22H2 versions antérieures à 10.1.22621.5040
Microsoft	N/A	Windows Server 2012 versions antérieures à 1.003
Microsoft	N/A	Windows 11 Version 23H2 pour systèmes ARM64 versions antérieures à 10.0.22631.5335
Microsoft	N/A	Windows Server 2008 pour systèmes x64 Service Pack 2 (Server Core installation) versions antérieures à 6.0.6003.23279
Microsoft	N/A	Windows Server 2008 R2 pour systèmes x64 Service Pack 1 (Server Core installation) versions antérieures à 6.1.7601.27729
Microsoft	N/A	Windows HLK pour Windows Server 2019 versions antérieures à 10.1.17763.7010
Microsoft	N/A	Windows 10 HLK version 21H1 antérieures à 10.1.19041.5609
Microsoft	N/A	Windows Server 2025 versions antérieures à 10.0.26100.3981
Microsoft	N/A	Windows 10 HLK version 21H2 antérieures à 10.1.19041.5609
Microsoft	N/A	Windows Server 2008 pour systèmes 32 bits Service Pack 2 (Server Core installation) versions antérieures à 1.003
Microsoft	N/A	Windows 11 Version 22H2 pour systèmes ARM64 versions antérieures à 10.0.22621.5335
Microsoft	N/A	Windows Server 2008 pour systèmes 32 bits Service Pack 2 versions antérieures à 1.003
Microsoft	N/A	Windows 10 Version 1607 pour systèmes 32 bits versions antérieures à 10.0.14393.8066
Microsoft	N/A	Windows Server 2008 R2 pour systèmes x64 Service Pack 1 versions antérieures à 6.1.7601.27729
Microsoft	N/A	Windows Server 2008 pour systèmes x64 Service Pack 2 versions antérieures à 6.0.6003.23279
Microsoft	N/A	Windows 10 Version 21H2 pour systèmes ARM64 versions antérieures à 10.0.19044.5854
Microsoft	N/A	Windows Server 2008 pour systèmes 32 bits Service Pack 2 versions antérieures à 6.0.6003.23279
Microsoft	N/A	Windows 10 Version 21H2 pour systèmes x64 versions antérieures à 10.0.19044.5854
Microsoft	N/A	Windows 10 Version 21H2 pour systèmes 32 bits versions antérieures à 10.0.19044.5854
Microsoft	N/A	Windows 10 Version 22H2 pour systèmes 32 bits versions antérieures à 10.0.19045.5854
Microsoft	N/A	Windows 10 pour systèmes x64 versions antérieures à 10.0.10240.21014
Microsoft	N/A	Windows Server 2008 pour systèmes 32 bits Service Pack 2 (Server Core installation) versions antérieures à 6.0.6003.23279
Microsoft	N/A	Windows Server 2012 R2 versions antérieures à 1.003
Microsoft	N/A	Windows 10 Version 22H2 pour systèmes ARM64 versions antérieures à 10.0.19045.5854
Microsoft	N/A	Windows Server 2022 (Server Core installation) versions antérieures à 10.0.20348.3630
Microsoft	N/A	Windows 10 Version 22H2 pour systèmes x64 versions antérieures à 10.0.19045.5854
Microsoft	N/A	Windows 10 Version 1607 pour systèmes x64 versions antérieures à 10.0.14393.8066
Microsoft	N/A	Windows Server 2012 (Server Core installation) versions antérieures à 6.2.9200.25475
Microsoft	N/A	Windows Server 2008 pour systèmes x64 Service Pack 2 (Server Core installation) versions antérieures à 1.003
Microsoft	N/A	Windows Server 2016 versions antérieures à 10.0.14393.8066
Microsoft	N/A	Windows Server 2008 pour systèmes x64 Service Pack 2 versions antérieures à 1.003
Microsoft	N/A	Windows HLK pour Windows Server 2025 versions antérieures à 10.1.26100.3478
Microsoft	N/A	Windows 10 pour systèmes 32 bits versions antérieures à 10.0.10240.21014
Microsoft	N/A	Windows 11 Version 24H2 pour systèmes x64 versions antérieures à 10.0.26100.3981
Microsoft	N/A	Windows 11 Version 23H2 pour systèmes x64 versions antérieures à 10.0.22631.5335
Microsoft	N/A	Windows Server 2012 versions antérieures à 6.2.9200.25475
Microsoft	N/A	Windows Server 2022 (Server Core installation) versions antérieures à 10.0.20348.3692
Microsoft	N/A	Windows 10 HLK Version 22H2 versions antérieures à 10.1.19041.5609
Microsoft	N/A	Windows HLK pour Windows Server 2022 versions antérieures à 10.1.20348.3330
Microsoft	N/A	Windows Server 2025 (Server Core installation) versions antérieures à 10.0.26100.3981
Microsoft	N/A	Windows Server 2022, 23H2 Edition (Server Core installation) versions antérieures à 10.0.25398.1611
Microsoft	N/A	Windows 11 HLK 24H2 versions antérieures à 10.1.26100.3478
Microsoft	N/A	Windows Server 2016 (Server Core installation) versions antérieures à 10.0.14393.8066
Microsoft	N/A	Windows Server 2022 versions antérieures à 10.0.20348.3630
Microsoft	N/A	Windows Server 2019 (Server Core installation) versions antérieures à 10.0.17763.7314
Microsoft	N/A	Windows Server 2012 R2 (Server Core installation) versions antérieures à 6.3.9600.22577
Microsoft	N/A	Windows Server 2012 R2 (Server Core installation) versions antérieures à 1.003
Microsoft	N/A	Windows 11 Version 24H2 pour systèmes ARM64 versions antérieures à 10.0.26100.3981

References

Title

Publication Time

Tags

Bulletin de sécurité Microsoft Windows CVE-2025-29839	2025-05-13	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-30385	2025-05-13	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-29831	2025-05-13	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-29836	2025-05-13	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-27468	2025-05-13	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-29967	2025-05-13	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-29955	2025-05-13	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-30397	2025-05-13	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-29830	2025-05-13	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-29835	2025-05-13	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-27488	2025-05-13	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-29964	2025-05-13	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-29970	2025-05-13	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-29833	2025-05-13	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-26677	2025-05-13	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-29832	2025-05-13	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-26646	2025-05-13	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-29960	2025-05-13	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-29838	2025-05-13	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-29841	2025-05-13	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-29962	2025-05-13	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-29969	2025-05-13	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-32706	2025-05-13	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-29961	2025-05-13	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-29958	2025-05-13	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-29837	2025-05-13	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-32707	2025-05-13	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-29840	2025-05-13	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-29971	2025-05-13	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-29966	2025-05-13	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-29974	2025-05-13	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-30394	2025-05-13	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-29829	2025-05-13	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-29842	2025-05-13	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-29957	2025-05-13	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-30388	2025-05-13	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-24063	2025-05-13	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-29954	2025-05-13	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-30400	2025-05-13	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-32701	2025-05-13	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-29956	2025-05-13	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-29968	2025-05-13	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-32709	2025-05-13	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-29959	2025-05-13	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-29963	2025-05-13	vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Windows Server 2012 R2 versions ant\u00e9rieures \u00e0 6.3.9600.22577",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows HLK Version 1809 versions ant\u00e9rieures \u00e0 10.1.17763.7010",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2012 (Server Core installation) versions ant\u00e9rieures \u00e0 1.003",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 1809 pour syst\u00e8mes 32 bits versions ant\u00e9rieures \u00e0 10.0.17763.7314",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows App Client pour Windows Desktop versions ant\u00e9rieures \u00e0 2.0.420",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2019 versions ant\u00e9rieures \u00e0 10.0.17763.7314",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 1809 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.17763.7314",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 11 Version 22H2 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.22621.5335",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 HLK version 20H2 ant\u00e9rieures \u00e0 10.1.19041.5609",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2008 R2 pour syst\u00e8mes x64 Service Pack 1 versions ant\u00e9rieures \u00e0 1.003",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows HLK pour Windows 10 version 2004 ant\u00e9rieures \u00e0 10.1.19041.5609",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2008 R2 pour syst\u00e8mes x64 Service Pack 1 (Server Core installation) versions ant\u00e9rieures \u00e0 1.003",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 11 HLK 22H2 versions ant\u00e9rieures \u00e0 10.1.22621.5040",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2012 versions ant\u00e9rieures \u00e0 1.003",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 11 Version 23H2 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.22631.5335",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2008 pour syst\u00e8mes x64 Service Pack 2 (Server Core installation) versions ant\u00e9rieures \u00e0 6.0.6003.23279",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2008 R2 pour syst\u00e8mes x64 Service Pack 1 (Server Core installation) versions ant\u00e9rieures \u00e0 6.1.7601.27729",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows HLK pour Windows Server 2019 versions ant\u00e9rieures \u00e0 10.1.17763.7010",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 HLK version 21H1 ant\u00e9rieures \u00e0 10.1.19041.5609",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2025 versions ant\u00e9rieures \u00e0 10.0.26100.3981",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 HLK version 21H2 ant\u00e9rieures \u00e0 10.1.19041.5609",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2008 pour syst\u00e8mes 32 bits Service Pack 2 (Server Core installation) versions ant\u00e9rieures \u00e0 1.003",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 11 Version 22H2 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.22621.5335",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2008 pour syst\u00e8mes 32 bits Service Pack 2 versions ant\u00e9rieures \u00e0 1.003",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 1607 pour syst\u00e8mes 32 bits versions ant\u00e9rieures \u00e0 10.0.14393.8066",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2008 R2 pour syst\u00e8mes x64 Service Pack 1 versions ant\u00e9rieures \u00e0 6.1.7601.27729",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2008 pour syst\u00e8mes x64 Service Pack 2 versions ant\u00e9rieures \u00e0 6.0.6003.23279",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 21H2 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.19044.5854",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2008 pour syst\u00e8mes 32 bits Service Pack 2 versions ant\u00e9rieures \u00e0 6.0.6003.23279",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 21H2 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.19044.5854",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 21H2 pour syst\u00e8mes 32 bits versions ant\u00e9rieures \u00e0 10.0.19044.5854",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 22H2 pour syst\u00e8mes 32 bits versions ant\u00e9rieures \u00e0 10.0.19045.5854",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.10240.21014",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2008 pour syst\u00e8mes 32 bits Service Pack 2 (Server Core installation) versions ant\u00e9rieures \u00e0 6.0.6003.23279",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2012 R2 versions ant\u00e9rieures \u00e0 1.003",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 22H2 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.19045.5854",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2022 (Server Core installation) versions ant\u00e9rieures \u00e0 10.0.20348.3630",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 22H2 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.19045.5854",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 1607 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.14393.8066",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2012 (Server Core installation) versions ant\u00e9rieures \u00e0 6.2.9200.25475",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2008 pour syst\u00e8mes x64 Service Pack 2 (Server Core installation) versions ant\u00e9rieures \u00e0 1.003",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2016 versions ant\u00e9rieures \u00e0 10.0.14393.8066",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2008 pour syst\u00e8mes x64 Service Pack 2 versions ant\u00e9rieures \u00e0 1.003",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows HLK pour Windows Server 2025 versions ant\u00e9rieures \u00e0 10.1.26100.3478",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 pour syst\u00e8mes 32 bits versions ant\u00e9rieures \u00e0 10.0.10240.21014",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 11 Version 24H2 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.26100.3981",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 11 Version 23H2 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.22631.5335",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2012 versions ant\u00e9rieures \u00e0 6.2.9200.25475",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2022 (Server Core installation) versions ant\u00e9rieures \u00e0 10.0.20348.3692",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 HLK Version 22H2 versions ant\u00e9rieures \u00e0 10.1.19041.5609",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows HLK pour Windows Server 2022 versions ant\u00e9rieures \u00e0 10.1.20348.3330",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2025 (Server Core installation) versions ant\u00e9rieures \u00e0 10.0.26100.3981",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2022, 23H2 Edition (Server Core installation) versions ant\u00e9rieures \u00e0 10.0.25398.1611",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 11 HLK 24H2 versions ant\u00e9rieures \u00e0 10.1.26100.3478",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2016 (Server Core installation) versions ant\u00e9rieures \u00e0 10.0.14393.8066",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2022 versions ant\u00e9rieures \u00e0 10.0.20348.3630",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2019 (Server Core installation) versions ant\u00e9rieures \u00e0 10.0.17763.7314",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2012 R2 (Server Core installation) versions ant\u00e9rieures \u00e0 6.3.9600.22577",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2012 R2 (Server Core installation) versions ant\u00e9rieures \u00e0 1.003",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 11 Version 24H2 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.26100.3981",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2025-29840",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-29840"
    },
    {
      "name": "CVE-2025-29836",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-29836"
    },
    {
      "name": "CVE-2025-30400",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-30400"
    },
    {
      "name": "CVE-2025-29830",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-29830"
    },
    {
      "name": "CVE-2025-26646",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-26646"
    },
    {
      "name": "CVE-2025-29954",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-29954"
    },
    {
      "name": "CVE-2025-29833",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-29833"
    },
    {
      "name": "CVE-2025-29835",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-29835"
    },
    {
      "name": "CVE-2025-27488",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-27488"
    },
    {
      "name": "CVE-2025-26677",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-26677"
    },
    {
      "name": "CVE-2025-29967",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-29967"
    },
    {
      "name": "CVE-2025-30394",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-30394"
    },
    {
      "name": "CVE-2025-29974",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-29974"
    },
    {
      "name": "CVE-2025-29962",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-29962"
    },
    {
      "name": "CVE-2025-29961",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-29961"
    },
    {
      "name": "CVE-2025-24063",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-24063"
    },
    {
      "name": "CVE-2025-29838",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-29838"
    },
    {
      "name": "CVE-2025-29955",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-29955"
    },
    {
      "name": "CVE-2025-29959",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-29959"
    },
    {
      "name": "CVE-2025-29956",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-29956"
    },
    {
      "name": "CVE-2025-27468",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-27468"
    },
    {
      "name": "CVE-2025-30385",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-30385"
    },
    {
      "name": "CVE-2025-29841",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-29841"
    },
    {
      "name": "CVE-2025-29832",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-29832"
    },
    {
      "name": "CVE-2025-29963",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-29963"
    },
    {
      "name": "CVE-2025-32706",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-32706"
    },
    {
      "name": "CVE-2025-29968",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-29968"
    },
    {
      "name": "CVE-2025-29966",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-29966"
    },
    {
      "name": "CVE-2025-29839",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-29839"
    },
    {
      "name": "CVE-2025-32709",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-32709"
    },
    {
      "name": "CVE-2025-29831",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-29831"
    },
    {
      "name": "CVE-2025-29837",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-29837"
    },
    {
      "name": "CVE-2025-29958",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-29958"
    },
    {
      "name": "CVE-2025-29842",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-29842"
    },
    {
      "name": "CVE-2025-29960",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-29960"
    },
    {
      "name": "CVE-2025-29964",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-29964"
    },
    {
      "name": "CVE-2025-32707",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-32707"
    },
    {
      "name": "CVE-2025-29970",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-29970"
    },
    {
      "name": "CVE-2025-30397",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-30397"
    },
    {
      "name": "CVE-2025-32701",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-32701"
    },
    {
      "name": "CVE-2025-29957",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-29957"
    },
    {
      "name": "CVE-2025-30388",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-30388"
    },
    {
      "name": "CVE-2025-29829",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-29829"
    },
    {
      "name": "CVE-2025-29971",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-29971"
    },
    {
      "name": "CVE-2025-29969",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-29969"
    }
  ],
  "initial_release_date": "2025-05-14T00:00:00",
  "last_revision_date": "2025-05-14T00:00:00",
  "links": [],
  "reference": "CERTFR-2025-AVI-0405",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2025-05-14T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Microsoft Windows. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.\n\nMicrosoft indique que les vuln\u00e9rabilit\u00e9s CVE-2025-30397, CVE-2025-30400, CVE-2025-32701, CVE-2025-32706 et CVE-2025-32709 sont activement exploit\u00e9es.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Microsoft Windows",
  "vendor_advisories": [
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-29839",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29839"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-30385",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30385"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-29831",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29831"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-29836",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29836"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-27468",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27468"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-29967",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29967"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-29955",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29955"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-30397",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30397"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-29830",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29830"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-29835",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29835"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-27488",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27488"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-29964",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29964"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-29970",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29970"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-29833",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29833"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-26677",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-26677"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-29832",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29832"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-26646",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-26646"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-29960",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29960"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-29838",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29838"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-29841",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29841"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-29962",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29962"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-29969",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29969"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-32706",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-32706"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-29961",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29961"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-29958",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29958"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-29837",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29837"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-32707",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-32707"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-29840",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29840"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-29971",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29971"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-29966",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29966"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-29974",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29974"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-30394",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30394"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-29829",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29829"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-29842",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29842"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-29957",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29957"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-30388",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30388"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-24063",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24063"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-29954",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29954"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-30400",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30400"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-32701",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-32701"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-29956",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29956"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-29968",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29968"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-32709",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-32709"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-29959",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29959"
    },
    {
      "published_at": "2025-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-29963",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29963"
    }
  ]
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

CVE-2025-30388 (GCVE-0-2025-30388)

Vulnerability from cvelistv5

fkie_cve-2025-30388

Vulnerability from fkie_nvd

ncsc-2025-0159

Vulnerability from csaf_ncscnl

ncsc-2025-0155

Vulnerability from csaf_ncscnl

ghsa-9j2q-rv22-36xm

Vulnerability from github

msrc_cve-2025-30388

Vulnerability from csaf_microsoft

CERTFR-2025-AVI-0404

Vulnerability from certfr_avis

Solutions

CERTFR-2025-AVI-0405

Vulnerability from certfr_avis

Solutions

Tags

Sightings

Nomenclature