CVE-2018-25238
MEDIUM
NVD
CVSS Score
6.2
Severity
MEDIUM
Published
Apr 04, 2026
Vendor
unknown
Description
Microsoft VSCO 1.1.1.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string through the search functionality. Attackers can paste a buffer of 5000 characters into the search bar and navigate back to trigger an application crash.