CVE-2019-25628

9.3 criticalEPSS 0.8%

Download Accelerator Plus DAP 10.0.6.0 contains a structured exception handler buffer overflow vulnerability that allows remote attackers to execute arbitrary code by crafting malicious URLs. Attackers can create specially crafted URLs with overflowing buffer data that overwrites SEH pointers and executes embedded shellcode when imported through the application's web page import functionality.

Severity

CVSS 4.0

9.3 critical

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 57% of CVEs (scores of 2026-10-31)
CWE: CWE-787
Published: 2026-03-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

http://www.speedbit.com/dap/
http://www.speedbit.com/dap/download/downloading.asp
https://www.exploit-db.com/exploits/46673
https://www.vulncheck.com/advisories/download-accelerator-plus-dap-seh-buffer-overflow

Check your stack JSON