CVE-2025-22894

Unprotected Windows messaging channel ('Shatter') issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker sends a specially crafted message to the specific process of the Windows system where the product is running, arbitrary files in the system may be altered. As a result, an arbitrary DLL may be executed with SYSTEM privilege.

Scoring

Severity

MEDIUM

CVSS base score

6.5

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N

EPSS probability

0.14%

CWE

CWE-422

Published

2025-02-06

Last modified

2026-03-13

Affected products

• Humming Heads Inc. Defense Platform Home Edition

Weakness type

• CWE-422

Related vulnerabilities

• CVE-2025-20094 — Unprotected Windows messaging channel ('Shatter') issue exists in Defense Platform Home Edition...

Markdown version · Browse all CVEs