Vulnerability · Published Aug 29, 2025 · Assigned by VulnCheck
CVE-2025-34164NetSupport Manager < 14.12.0000 Heap-Based Buffer Overflow
Critical 9.3
In plain English
A critical-severity heap buffer overflow in NetSupport Manager from NetSupport Ltd.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 52% of all known vulnerabilities).
Severity (CVSS 4.0)9.3Critical
Exploit odds (30 days)0.7%top 48.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A heap-based buffer overflow vulnerability in NetSupport Manager 14.x versions prior to 14.12.0000 allows a remote, unauthenticated attacker to cause a denial of service (DoS) or execute arbitrary code.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| NetSupport Ltd. | NetSupport Manager | 14.0 – before 14.12.0000 |
Weakness: CWE-122 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
References
- https://www.netsupportmanager.com/ product
- https://www.vulncheck.com/advisories/netsupport-client-manager-buffer-overflows third-party-advisory