Is CVE-2019-25733 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2019-25733 being exploited in the wild.

How severe is CVE-2019-25733?

High severity, with a CVSS score of 8.4, published 4 June 2026.

Which products and versions are affected?

Nsasoft NetShareWatcher 1.5.8.0 and earlier.

Is there a fix for CVE-2019-25733?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2019-25733 attacked?

It is attacked with local access, in a network appliance.

Am I affected by CVE-2019-25733?

Check whether you run Nsasoft NetShareWatcher at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2019-25733: Nsasoft NetShareWatcher SEH buffer overflow in Restrictions filter

CVE-2019-25733 · Severity: high · CVSS 8.4 · Published 2026-06-04

NetShareWatcher, a tool used by network administrators to monitor shared folder permissions and security policies, contains a vulnerability that could allow a local user to take full control of the system. By entering specially crafted text into the software's filter settings, an attacker can crash the application and execute malicious commands. This could lead to unauthorized access to sensitive data or a complete compromise of the workstation where the software is installed.

Technologies: Nsasoft NetShareWatcher. Vendors: Nsasoft.

Quick answers

Is CVE-2019-25733 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2019-25733 being exploited in the wild.
How severe is CVE-2019-25733?: High severity, with a CVSS score of 8.4, published 4 June 2026.
Which products and versions are affected?: Nsasoft NetShareWatcher 1.5.8.0 and earlier.
Is there a fix for CVE-2019-25733?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2019-25733 attacked?: It is attacked with local access, in a network appliance.
Am I affected by CVE-2019-25733?: Check whether you run Nsasoft NetShareWatcher at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A classic buffer overflow (CWE-120) exists in NetShareWatcher version 1.5.8.0 and potentially earlier versions. The vulnerability is located in the 'Restrictions' custom filter field within the application's settings. By supplying an overly long string to this field, a local attacker can overwrite the Structured Exception Handler (SEH) and Next SEH (NSEH) pointers. When the 'Find' function is subsequently invoked, the application triggers an exception, leading to the execution of the attacker-supplied shellcode. This exploit requires local access to the application interface but does not require elevated privileges or user interaction beyond the initial configuration of the malicious filter.

Affected products

Nsasoft NetShareWatcher 1.5.8.0 and earlier

Timeline

2019-03-19: other: Exploit code originally authored
2019-03-20: disclosed: Exploit published on Exploit-DB
2026-06-04: advisory: CVE-2019-25733 published by NVD/VulnCheck

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.