CVE-2018-6947: Microsoft Windows 10

High severity, CVSS 7.8. EPSS: 3.1% chance of exploitation in the next 30 days.

An uninitialised stack variable in the nxfuse component that is part of the Open Source DokanFS library shipped with NoMachine 6.0.66_2 and earlier allows a local low privileged user to gain elevation of privileges on Windows 7 (32 and 64bit), and denial of service for Windows 8 and 10.

Affected products

• Microsoft Windows 10: any version
• Microsoft Windows 7: any version
• Microsoft Windows 8: any version
• Nomachine Nomachine: up to and including 6.0.66_2

Published 2018-02-28. Last modified 2026-06-17.