VULNERABILITY INTELLIGENCE

CVE-2021-42973

CVSS score8.8 HIGH

EPSS probability0.50%

CISA KEVNot currently listed

Published2021-12-07

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Description

NoMachine Server is affected by Integer Overflow. IOCTL Handler 0x22001B in the NoMachine Server above 4.0.346 and below 7.7.4 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.

Weakness classification

nvd@nist.gov: CWE-190

Primary references

cve@mitre.org — Exploit, Technical Description, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Technical Description, Third Party Advisory