CVE-2019-25628CWE-787

Download Accelerator Plus DAP 10.0.6.0 SEH Buffer Overflow

Critical · published March 24, 2026

CVSS v4.0
9.3
EPSS
1%
Percentile
56.7
In the wild
Unconfirmed
What it is

Download Accelerator Plus DAP 10.0.6.0 contains a structured exception handler buffer overflow vulnerability that allows remote attackers to execute arbitrary code by crafting malicious URLs. Attackers can create specially crafted URLs with overflowing buffer data that overwrites SEH pointers and executes embedded shellcode when imported through the application's web page import functionality.

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00816 · 56.7th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2026-03-24T11:27Z
EPSS history
Timeline
  • 24 MAR 11:27Z
    Download Accelerator Plus DAP 10.0.6.0 SEH Buffer Overflow
    cvelistv5