CVE-2018-25240

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2018-25240
Watchr 1.1.0.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string to the search functionality. Attackers can paste a buffer of 8145 characters into the search bar and trigger a search operation to cause the application to crash.

6.2 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.5 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://www.exploit-db.com/exploits/46194
https://www.microsoft.com/store/productId/9PN12GNX62VZ
https://www.vulncheck.com/advisories/watchr-denial-of-service-via-search
Configurations

No configuration.

History

21 Jul 2026, 07:10

Type Values Removed Values Added
Summary
  • (es) Watchr 1.1.0.0 contiene una vulnerabilidad de denegación de servicio que permite a atacantes locales bloquear la aplicación al enviar una cadena excesivamente larga a la funcionalidad de búsqueda. Los atacantes pueden pegar un búfer de 8145 caracteres en la barra de búsqueda y activar una operación de búsqueda para hacer que la aplicación se bloquee.

04 Apr 2026, 20:16

Type Values Removed Values Added
References
  • {'url': 'https://www.vulncheck.com/advisories/microsoft-watchr-denial-of-service-via-search', 'source': 'disclosure@vulncheck.com'}
  • () https://www.vulncheck.com/advisories/watchr-denial-of-service-via-search -

04 Apr 2026, 17:16

Type Values Removed Values Added
Summary (en) Microsoft Watchr 1.1.0.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string to the search functionality. Attackers can paste a buffer of 8145 characters into the search bar and trigger a search operation to cause the application to crash. (en) Watchr 1.1.0.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string to the search functionality. Attackers can paste a buffer of 8145 characters into the search bar and trigger a search operation to cause the application to crash.

04 Apr 2026, 14:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-04-04 14:16

Updated : 2026-07-21 07:10

NVD link : CVE-2018-25240

Mitre link : CVE-2018-25240

CVE.ORG link : CVE-2018-25240

JSON object : View

Products Affected

No product.

CWE
CWE-1260

Improper Handling of Overlap Between Protected Memory Ranges