NordVPN patches "clumsy" Windows bug that let attackers disable system services

https://cdn.mos.cms.futurecdn.net/kEn3wXDv34dPV6X2rbZfFW-1945-80.jpg
  • A vulnerability in NordVPN's Windows app allowed local attackers to stop unprotected system services.
  • The flaw, officially tracked as CVE-2026-106030, does not affect NordVPN version 8.12.0.0 or later
  • Experts label the bug "clumsy," but the actual impact on users is minimal, requiring a device to already be compromised by malware.

Nord Security has rolled out an important security update for its Windows application to address a vulnerability that could allow a hacker to stop unprotected Windows services.

The flaw allowed a local, low-privileged attacker to act as a trusted process. From there, they could potentially stop unprotected Windows services or change their startup types to manual, leading to a denial of service for those specific applications.

When a top-tier provider, frequently ranked as the best VPNon the market, flags a security patch of this nature, it naturally turns heads. However, cybersecurity experts stress that while the coding error shouldn't...

Copyright of this story solely belongs to www.techradar.com. To see the full text click HERE

Read more