Nero

9 CVEs across 7 Nero products. Browse Nero vulnerabilities, severities, and proof-of-concept exploits.

Nero products with known CVEs

ProductCVEs
Mediahome4
Nero2
Backitup1
Mediahome Ce1
Mediaplayer1
Neronet1
Showtime1
Nero CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-63680High8.62025-11-14Nero BackItUp in the Nero Productline is vulnerable to a path parsing/UI rendering flaw (CWE-22) that, in combination with Windows ShellExecuteW fallback exten…
CVE-2017-15383High7.82017-10-16Nero 7.10.1.0 has an unquoted BINARY_PATH_NAME for NBService, exploitable via a Trojan horse Nero.exe file in the %PROGRAMFILES(x86)%\Nero directory.
CVE-2012-58772014-05-30Nero MediaHome 4.5.8.0 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an HTTP header without a name.
CVE-2012-58762014-05-30Multiple off-by-one errors in NMMediaServerService.dll in Nero MediaHome 4.5.8.0 and earlier allow remote attackers to cause a denial of service (crash) via a…
CVE-2008-70792009-08-25Buffer overflow in Nero ShowTime 5.0.15.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long entry in…
CVE-2008-19052008-04-22NMMediaServer.exe in Nero MediaHome 3.3.3.0 and earlier, as used in Nero 8.3.2.1 and earlier, allows remote attackers to cause a denial of service (NULL pointe…
CVE-2008-06192008-02-06Buffer overflow in NeroMediaPlayer.exe in Nero Media Player 1.4.0.35 and earlier allows remote attackers to execute arbitrary code or cause a denial of service…
CVE-2007-23222007-04-27NMMediaServer.exe in Nero MediaHome 2.5.5.0 and CE 1.3.0.4 allows remote attackers to cause a denial of service (NULL dereference and application crash) via a…
CVE-2005-34842005-11-03Directory traversal vulnerability in NeroNET 1.2.0.2 and earlier allows remote attackers to read arbitrary files with certain file extensions (such as ZIP, AVI…