CVE-2019-25365: Chaospro

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

ChaosPro 2.0 contains a buffer overflow vulnerability in the configuration file path handling that allows attackers to execute arbitrary code by overwriting the Structured Exception Handler. Attackers can craft a malicious configuration file with carefully constructed payload to overwrite memory and gain remote code execution on vulnerable Windows XP systems.

Affected products

• Chaospro Chaospro: version 2.0 only

Published 2026-02-18. Last modified 2026-06-17.