Priority HIGH 80
An arbitrary file overwrite vulnerability in NoMachine Free Edition and Enterprise Client for macOS before v8.8.1 allows attackers to overwrite root-owned files by using hardlinks.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.01217 · Published 2023-08-04 · No fix listed CWE-59
Priority MEDIUM 50
NoMachine nxwebrunner Heap-based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00584 · Published 2026-11-03 · No fix listed CWE-122
Priority MEDIUM 45
A vulnerability in NoMachine App for Android 5.0.63 and earlier allows attackers to alter environment variables via unspecified vectors.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01652 · Published 2018-09-04 · No fix listed CWE-20
Priority MEDIUM 45
An unspecified server utility in NoMachine before 5.3.10 on Mac OS X and Linux allows authenticated users to gain privileges by gaining access to local files.
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.03863 · Published 2017-08-29 · No fix listed CWE-276
Priority MEDIUM 44
NoMachine getstat Command Injection Remote Code Execution Vulnerability.
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02269 · Published 2026-08-20 · No fix listed CWE-78
Priority MEDIUM 41
NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.0HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00618 · Published 2026-10-21 · No fix listed CWE-122
Priority MEDIUM 41
NoMachine before 5.3.27 and 6.x before 6.3.6 allows attackers to gain privileges via a Trojan horse wintab32.dll file located in the same directory as a .nxs file, as demonstrated by a scenario where the .nxs file and th…
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.04554 · Published 2018-10-15 · No fix listed CWE-426
Priority MEDIUM 40
An uninitialised stack variable in the nxfuse component that is part of the Open Source DokanFS library shipped with NoMachine 6.0.66_2 and earlier allows a local low privileged user to gain elevation of privileges on Wi…
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.03089 · Published 2018-02-28 · No fix listed CWE-665
Priority LOW 39
NoMachine Enterprise Client is affected by Integer Overflow.
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00497 · Published 2021-12-07 · No fix listed CWE-190
Priority LOW 39
NoMachine Enterprise Client is affected by Buffer Overflow.
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00479 · Published 2021-12-07 · No fix listed CWE-120
Priority LOW 39
NoMachine Cloud Server is affected by Buffer Overflow.
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00479 · Published 2021-12-07 · No fix listed CWE-120
Priority LOW 39
NoMachine Cloud Server is affected by Integer Overflow.
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00497 · Published 2021-12-07 · No fix listed CWE-190
Priority LOW 39
NoMachine Enterprise Desktop is affected by Integer Overflow.
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00497 · Published 2021-12-07 · No fix listed CWE-190
Priority LOW 39
NoMachine Enterprise Desktop is affected by Buffer Overflow.
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00479 · Published 2021-12-07 · No fix listed CWE-120
Priority LOW 39
NoMachine Server is affected by Integer Overflow.
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00497 · Published 2021-12-07 · No fix listed CWE-190
Priority LOW 39
NoMachine Server is affected by Buffer Overflow.
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00478 · Published 2021-12-07 · No fix listed CWE-120
Priority LOW 38
NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability.
CVSS 3.0HIGH 7.2· Network · No auth · No interaction · EPSS 0.00327 · Published 2026-10-21 · No fix listed CWE-918
Priority LOW 36
NoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00243 · Published 2026-10-21 · No fix listed CWE-331
Priority LOW 36
NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00271 · Published 2025-09-02 · No fix listed CWE-427
Priority LOW 36
NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00349 · Published 2024-11-22 · No fix listed CWE-427
Priority LOW 36
nxapplet.jar in No Machine NX Web Companion 3.x and earlier does not properly verify the authenticity of updates, which allows user-assisted remote attackers to execute arbitrary code via a crafted (1) SiteUrl or (2) Red…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.03153 · Published 2012-09-19 · No fix listed CWE-287
Priority LOW 35
NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation Vulnerability.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00142 · Published 2026-10-21 · No fix listed CWE-732
Priority LOW 35
NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00214 · Published 2026-04-11 · No fix listed CWE-427
Priority LOW 35
NoMachine External Control of File Path Local Privilege Escalation Vulnerability.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00218 · Published 2026-04-11 · No fix listed CWE-73
Priority LOW 33
Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Nomachine allows Argument Injection.This issue affects Nomachine: before 9.5.7, before 8.23.2.
CVSS 4.0HIGH 7.3· Local · Low privileges · No interaction · EPSS 0.00134 · Published 2026-06-10 · Fixed in 9.5.7, 8.23.2 CWE-88
Load more
THREATIST.IORead the docs