Critical severity · published Aug 29, 2025
CVE-2025-34164
NetSupport Manager < 14.12.0000 Heap-Based Buffer Overflow
9.3
CVSS
0.7%
EPSS
No
On KEV
Description
A heap-based buffer overflow vulnerability in NetSupport Manager 14.x versions prior to 14.12.0000 allows a remote, unauthenticated attacker to cause a denial of service (DoS) or execute arbitrary code.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 51% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NM
NetSupport Manager · NetSupport Ltd.
14.0 before 14.12.0000 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-34164
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-34164
www.netsupportmanager.com
https://www.netsupportmanager.com/
www.vulncheck.com
https://www.vulncheck.com/advisories/netsupport-client-manager-buffer-overflows
More from NetSupport Manager
8.8
CVE-2025-34165
NetSupport Manager < 14.12.0000 Stack-Based Buffer Overflow