๐Ÿ” CVE Alert

CVE-2018-25378

MEDIUM 6.2

Notebook Pro 2.0 Denial of Service via Notebook Name Field

CVSS Score
6.2
EPSS Score
0.0%
EPSS Percentile
2th

Notebook Pro 2.0 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the notebook name field. Attackers can create a malicious text file containing 500 or more characters, paste the content into the New Notebook Name field, and trigger an application crash when attempting to create and save the notebook.

CWE CWE-789
Vendor stokedonit
Product notebook pro
Published May 25, 2026
Last Updated May 26, 2026
Stay Ahead of the Next One

Get instant alerts for stokedonit notebook pro

Be the first to know when new medium vulnerabilities affecting stokedonit notebook pro are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Affected Versions

Stokedonit / Notebook Pro
2.0

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
exploit-db.com: https://www.exploit-db.com/exploits/45420 vulncheck.com: https://www.vulncheck.com/advisories/notebook-pro-denial-of-service-via-notebook-name-field

Credits

Ali Alipour