Nordvpn

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 6
    Known Exploited: 0
    1
    Critical Level Threats
    4
    High Level Threats
    1
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2018-25368

    Nord VPN 6.14.31 Denial of Service via Password Field

    Last Modified: May 26, 2026
    Published: May 25, 2026

    CVE-2019-25572

    NordVPN 6.19.6 Denial of Service via Email Field Buffer Overflow

    Last Modified: Apr 15, 2026
    Published: Mar 21, 2026

    CVE-2020-36992

    Nord VPN-6.31.13.0 - 'nordvpn-service' Unquoted Service Path

    Last Modified: Apr 15, 2026
    Published: Jan 28, 2026

    CVE-2018-3952

    An exploitable code execution vulnerability exists in the connect functionality of NordVPN 6.14.28.0. A specially crafted configuration file can cause a privilege escalation, resulting in the execution of arbitrary commands with system privileges.

    Last Modified: Nov 21, 2024
    Published: Sep 07, 2018

    CVE-2018-10170

    NordVPN 6.12.7.0 for Windows suffers from a SYSTEM privilege escalation vulnerability through the "nordvpn-service" service. This service establishes an NetNamedPipe endpoint that allows arbitrary installed applications to connect and call publicly exposed methods. The "Connect" method accepts a class instance argument that provides attacker control of the OpenVPN command line. An attacker can specify a dynamic library plugin that should run for every new VPN connection attempt. This plugin will execute code in the context of the SYSTEM user.

    Last Modified: Nov 21, 2024
    Published: Apr 16, 2018
    Items Per Page
    Nordvpn Vulnerabilities & Security CVEs | CVE-DB