CVE-2018-25215: Passfab Excel Password Recovery

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Excel Password Recovery Professional 8.2.0.0 contains a local buffer overflow vulnerability that allows attackers to cause a denial of service by supplying an excessively long string to the 'E-Mail and Registrations Code' field. Attackers can paste a crafted payload containing 5000 bytes of data into the registration field to trigger a crash when the Register button is clicked.

Affected products

• Passfab Excel Password Recovery: version 8.2.0.0 only

Published 2026-03-26. Last modified 2026-06-17.