CVE-2018-6947

An uninitialised stack variable in the nxfuse component that is part of the Open Source DokanFS library shipped with NoMachine 6.0.66_2 and earlier allows a local low privileged user to gain elevation of privileges on Windows 7 (32 and 64bit), and denial of service for Windows 8 and 10.

• CWE-665

• https://www.exploit-db.com/exploits/44167/Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/44168/Third Party Advisory, VDB Entry
• https://www.fidusinfosec.com/nomachine-road-code-execution-without-fuzzing-cve-2018-6947/Third Party Advisory
• https://www.nomachine.com/SU02P00194Vendor Advisory
• https://www.nomachine.com/SU02P00195Vendor Advisory
• https://www.nomachine.com/TR02P08408Vendor Advisory
• https://www.exploit-db.com/exploits/44167/Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/44168/Third Party Advisory, VDB Entry
• https://www.fidusinfosec.com/nomachine-road-code-execution-without-fuzzing-cve-2018-6947/Third Party Advisory
• https://www.nomachine.com/SU02P00194Vendor Advisory
• https://www.nomachine.com/SU02P00195Vendor Advisory
• https://www.nomachine.com/TR02P08408Vendor Advisory

Published

Feb 28, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-6936Cross Site Scripting (XSS) exists on the D-Link DIR-600M C1 …
• CVE-2018-6940A /shell?cmd= XSS issue exists in the HTTPD component of NAT…
• CVE-2018-6941A /shell?cmd= CSRF issue exists in the HTTPD component of NA…
• CVE-2018-6942An issue was discovered in FreeType 2 through 2.9. A NULL po…
• CVE-2018-6943core/lib/upload/um-image-upload.php in the UltimateMember pl…
• CVE-2018-6944core/lib/upload/um-file-upload.php in the UltimateMember plu…
• CVE-2018-6948In CCN-lite 2, the function ccnl_prefix_to_str_detailed can …
• CVE-2018-6951An issue was discovered in GNU patch through 2.7.6. There is…
• CVE-2018-6952A double free exists in the another_hunk function in pch.c i…
• CVE-2018-6953In CCN-lite 2, the Parser of NDNTLV does not verify whether …
• CVE-2018-6954systemd-tmpfiles in systemd through 237 mishandles symlinks …7.8
• CVE-2018-6957VMware Workstation (14.x before 14.1.1, 12.x) and Fusion (10…