100 matches found
CVE-2026-106030
NordVPN for Windows allows local attackers to stop unprotected Windows system services and change their startup type to Manual via named pipes. The NordVPN user-mode application allows a low-privileged attacker to act as a trusted process and connect to the named pipe...
CVE-2026-106030 Missing Authorization in NordVPN for Windows
NordVPN for Windows allows local attackers to stop unprotected Windows system services and change their startup type to Manual via named pipes. The NordVPN user-mode application allows a low-privileged attacker to act as a trusted process and connect to the named pipe...
EUVD-2026-102833
NordVPN for Windows allows local attackers to stop unprotected Windows system services and change their startup type to Manual via named pipes. The NordVPN user-mode application allows a low-privileged attacker to act as a trusted process and connect to the named pipe...
CVE-2026-106030
The NordVPN for Windows user-mode application contains a missing authorization vulnerability where a low-privileged local attacker can connect to the named pipe \.\pipe\nord-security\v1\NordVpnService\Server. By acting as a trusted process, an attacker can invoke the ISettingsGrpc.StopService and...
PT-2026-115572
Name of the Vulnerable Software and Affected Versions NordVPN for Windows versions prior to 8.12 Description A low-privileged local attacker can connect to the named pipe ".pipe ord-securityv1NordVpnServiceServer" by acting as a trusted process. This allows the attacker to invoke the...
Shaq Got Hacked. Now He’s Pitching for a VPN
At a recent event for security firm NordVPN, NBA superstar Shaquille O’Neal revealed that he got hacked—and warned the public about the need to “have control of their own information.”...
CVE-2018-25368
creationtimestamp| type| source ---|---|--- 2026-05-26 01:44:03+00:00| seen| https://www.acn.gov.it/portale/w/nordvpn-poc-pubblico-per-lo-sfruttamento-della-cve-2018-25368...
CVE-2018-25368
NordVPN 6.14.31 is affected by a denial-of-service vulnerability triggered by submitting an excessively long password string. Unauthenticated attackers can crash the application during authentication by pasting a buffer of repeated characters into the password field. The description in the connec...
PT-2026-43209
Name of the Vulnerable Software and Affected Versions Nord VPN version 6.14.31 Description A denial of service issue exists that allows unauthenticated attackers to crash the application. This occurs when an excessively long string, such as a buffer of repeated characters, is submitted in the...
EUVD-2019-19892
NordVPN 6.19.6 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string in the email input field. Attackers can paste a buffer of 100,000 characters into the email field during login to trigger an application crash...
CVE-2019-25572
NordVPN 6.19.6 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string in the email input field. Attackers can paste a buffer of 100,000 characters into the email field during login to trigger an application crash...
CVE-2019-25572 NordVPN 6.19.6 Denial of Service via Email Field Buffer Overflow
NordVPN 6.19.6 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string in the email input field. Attackers can paste a buffer of 100,000 characters into the email field during login to trigger an application crash...
CVE-2019-25572
NordVPN 6.19.6 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string in the email input field. Attackers can paste a buffer of 100,000 characters into the email field during login to trigger an application crash...
CVE-2019-25572 NordVPN 6.19.6 Denial of Service via Email Field Buffer Overflow
NordVPN 6.19.6 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string in the email input field. Attackers can paste a buffer of 100,000 characters into the email field during login to trigger an application crash...
CVE-2019-25572
NordVPN 6.19.6 is affected by a denial-of-service vulnerability in the login flow: an excessively long string (about 100,000 characters) submitted in the email input can crash the application. The issue is triggered by a local attacker who can paste the long buffer into the email field during log...
CVE-2019-25572: Improper Handling of Overlap Between Protected Memory Ranges
NordVPN 6.19.6 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string in the email input field. Attackers can paste a buffer of 100,000 characters into the email field during login to trigger an application crash...
PT-2026-26917
Name of the Vulnerable Software and Affected Versions NordVPN version 6.19.6 Description A denial of service issue allows local attackers to crash the application by submitting an excessively long string in the email input field. Specifically, pasting a buffer of 100,000 characters into the email...
NordVPN security vulnerabilities
NordVPN is a virtual private network service provided by the NordVPN company. Version 6.19.6 of NordVPN contains a security vulnerability. This vulnerability stems from a buffer overflow in the email input field, which could allow local attackers to cause the application to crash by submitting...
CVE-2020-36992
Nord VPN 6.31.13.0 contains an unquoted service path vulnerability in its nordvpn-service that allows local attackers to execute code with elevated privileges. Attackers can exploit the unquoted binary path during system startup or reboot to potentially run malicious code with LocalSystem...
CVE-2020-36992 Nord VPN-6.31.13.0 - 'nordvpn-service' Unquoted Service Path
Nord VPN 6.31.13.0 contains an unquoted service path vulnerability in its nordvpn-service that allows local attackers to execute code with elevated privileges. Attackers can exploit the unquoted binary path during system startup or reboot to potentially run malicious code with LocalSystem...