What’s Vulnerable › Vulnerabilities

CVE-2025-64693

• Severity: critical (CVSS 9.3 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-11-25 · updated 2026-10-18
• Weakness: CWE-122

Description

Security Point (Windows) of MaLion and MaLionCloud contains a heap-based buffer overflow vulnerability in processing Content-Length. Receiving a specially crafted request from a remote unauthenticated attacker could lead to arbitrary code execution with SYSTEM privilege.

Affected products

• Intercom, Inc. Security Point (Windows) of MaLion: before Ver.7.1.1.9
• Intercom, Inc. Security Point (Windows) of MaLionCloud: before Ver.7.2.0.1

References

• https://jvn.jp/en/jp/JVN76298784/
• https://www.intercom.co.jp/information/2025/1125.html

Get alerted when CVE-2025-64693 or the next vulnerability affects your stack