CVE-2018-25307 HIGH

CVE-2018-25307: SysGauge Pro 4.6.12 Local Buffer Overflow SEH

Vendor Sysgauge
Product SysGauge Pro
Weakness CWE-120
Published April 29, 2026
Last update May 1, 2026
View on NVD All CVEs

CVSS base score

8.6/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

SysGauge Pro 4.6.12 contains a local buffer overflow vulnerability in the Register function that allows local attackers to overwrite the structured exception handler by supplying a crafted unlock key. Attackers can inject shellcode through the Unlock Key field during registration to execute arbitrary code with application privileges.

Key dates

02Disclosure timeline

April 29, 2026 CVE published
May 1, 2026 Record updated