CVE-2018-10655: DLPnpAuditor.exe in DeviceLock Plug and Play Auditor (freeware) 5.72 has a Unicode Buffer Overflow (SEH).

Security readout for executives and security teams

This CVE affects a specific freeware utility, DeviceLock Plug and Play Auditor 5.72. A flaw in its DLPnpAuditor.exe component can crash or potentially hijack the program through a Unicode buffer overflow. Business impact depends on whether this legacy tool is installed and used on administrative or security workstations. Exposure is likely limited to Windows systems where DeviceLock Plug and Play Auditor freeware 5.72 is installed. It is most relevant on security, audit, or administrative endpoints that may run the affected executable. Treat this as a targeted legacy-tool cleanup item, not an internet-wide emergency. Prioritize confirmation of installation, especially on privileged workstations, because public exploit material exists and no authoritative fix is identified in the provided sources. Mitigation focus: Identify and remove DeviceLock Plug and Play Auditor 5.72 if it is not required.; Check vendor or maintainer guidance for any fixed version or replacement recommendation.; Restrict execution of DLPnpAuditor.exe to trusted administrative users only..

Prepared

Jun 7, 2026, 13:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.