PatchTheCVEnordvpn vulnerabilities and fixes
Recent CVEs affecting nordvpn, with upgrade or downgrade steps. 3 tracked.
nordvpn has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2018-09-07. Highest priority: CVE-2018-10170 (score 61/100).
- CVE-2018-9105 HIGH 8.8 DOWNGRADE NordVPN 3.3.10 for macOS suffers from a root privilege escalation vulnerability
- CVE-2018-3952 HIGH 8.8 DOWNGRADE An exploitable code execution vulnerability exists in the connect functionality of NordVPN 6.14.28.0
- CVE-2018-10170 CRITICAL 9.8 DOWNGRADE NordVPN 6.12.7.0 for Windows suffers from a SYSTEM privilege escalation vulnerability through the "nordvpn-ser
FAQ
How do I fix nordvpn vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is nordvpn being exploited right now?
None of the tracked nordvpn CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which nordvpn CVE should I patch first?
CVE-2018-10170 currently ranks highest (61/100): NordVPN 6.12.7.0 for Windows suffers from a SYSTEM privilege escalation vulnerability through the "nordvpn-ser.