https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T16:59:36.538657+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-215103 EUVD-2026-215103 2026-10-07T16:59:36.601925+00:00 EUVD-2026-215103 https://cve.radiocsirt.org/vuln/fkie_cve-2025-22890 fkie_cve-2025-22890 2026-10-07T16:59:36.601962+00:00

Execution with unnecessary privileges issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker performs a specific operation, SYSTEM privilege of the Windows system where the product is running may be obtained.

 https://cve.radiocsirt.org/vuln/ghsa-rxvc-6r3x-5p47 GHSA-rxvc-6r3x-5p47 2026-10-07T16:59:36.602002+00:00

Execution with unnecessary privileges issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker performs a specific operation, SYSTEM privilege of the Windows system where the product is running may be obtained.

 https://cve.radiocsirt.org/vuln/jvndb-2025-000008 jvndb-2025-000008 2026-10-07T16:59:36.602019+00:00

Defense Platform Home Edition provided by Humming Heads Inc. contains multiple vulnerabilities listed below. <ul><li>Improper handling of message in specific process (CWE-422) - CVE-2025-20094</li> <li>Execution with unnecessary privileges (CWE-250) - CVE-2025-22890</li> <li>Improper handling of message in specific process (CWE-422) - CVE-2025-22894</li> <li>Buffer overflow vulnerability in DeviceIoControl (CWE-120) - CVE-2025-23236</li> <li>NULL pointer dereference vulnerability in DeviceIoControl (CWE-476) - CVE-2025-24483</li> <li>Argument injection vulnerability in DPprd.sys and DPavd.sys (CWE-88) - CVE-2025-24845</li></ul> CVE-2025-20094, CVE-2025-22890, CVE-2025-22894, CVE-2025-23236, CVE-2025-24483 Taizoh Tsukamoto of Mitsui Bussan Secure Directions, Inc. reported these vulnerabilities to JPCERT/CC. JPCERT/CC coordinated with the developer. CVE-2025-24845 This vulnerability was reported to IPA under the Information Security Early Warning Partnership, and JPCERT/CC coordinated with the developer.