Report: CVE-2018-25238 - Microsoft VSCO 1.1.1.0 Denial of Service via Search - 2025 Update

Report: CVE-2018-25238 - Microsoft VSCO 1.1.1.0 Denial of Service via Search - 2025 Update

CVE ID :CVE-2018-25238 Published : April 4, 2026, 1:51 p.m. | 18 minutes ago Description :Microsoft VSCO 1.1.1.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string through the search functionality. Attackers can paste a buffer of 5000 characters into the search bar and navigate back to trigger an application crash. Severity: 6.9 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
MEDIUM
Published
April 4, 2026
Affected Product: Microsoft VSCO
Attack Vector: local
Impact: denial of service