High severity7.5NVD Advisory· Published Feb 11, 2026· Updated Apr 15, 2026

CVE-2020-37215

Description

MSN Password Recovery version 1.30 contains a denial of service vulnerability that allows attackers to crash the application by supplying an oversized input in the registration code field. Attackers can generate a 9000-byte buffer of repeated characters and paste it into the 'User Name and Registration Code' field to trigger an application crash.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Top Password/MSN Password Recoveryllm-create
Range: =1.30

Patches

Vulnerability mechanics

References

www.exploit-db.com/exploits/47839nvd
www.top-password.comnvd
www.vulncheck.com/advisories/msn-password-recovery-denial-of-servicenvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000