https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T15:27:56.022751+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-215102 EUVD-2026-215102 2026-10-05T15:27:56.093814+00:00 EUVD-2026-215102 https://cve.radiocsirt.org/vuln/fkie_cve-2025-22894 fkie_cve-2025-22894 2026-10-05T15:27:56.093855+00:00

Unprotected Windows messaging channel ('Shatter') issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker sends a specially crafted message to the specific process of the Windows system where the product is running, arbitrary files in the system may be altered. As a result, an arbitrary DLL may be executed with SYSTEM privilege.

 https://cve.radiocsirt.org/vuln/ghsa-rc3f-g789-3fg8 GHSA-rc3f-g789-3fg8 2026-10-05T15:27:56.093891+00:00

Unprotected Windows messaging channel ('Shatter') issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker sends a specially crafted message to the specific process of the Windows system where the product is running, arbitrary files in the system may be altered. As a result, an arbitrary DLL may be executed with SYSTEM privilege.

 https://cve.radiocsirt.org/vuln/jvndb-2025-000008 jvndb-2025-000008 2026-10-05T15:27:56.093910+00:00

Defense Platform Home Edition provided by Humming Heads Inc. contains multiple vulnerabilities listed below. <ul><li>Improper handling of message in specific process (CWE-422) - CVE-2025-20094</li> <li>Execution with unnecessary privileges (CWE-250) - CVE-2025-22890</li> <li>Improper handling of message in specific process (CWE-422) - CVE-2025-22894</li> <li>Buffer overflow vulnerability in DeviceIoControl (CWE-120) - CVE-2025-23236</li> <li>NULL pointer dereference vulnerability in DeviceIoControl (CWE-476) - CVE-2025-24483</li> <li>Argument injection vulnerability in DPprd.sys and DPavd.sys (CWE-88) - CVE-2025-24845</li></ul> CVE-2025-20094, CVE-2025-22890, CVE-2025-22894, CVE-2025-23236, CVE-2025-24483 Taizoh Tsukamoto of Mitsui Bussan Secure Directions, Inc. reported these vulnerabilities to JPCERT/CC. JPCERT/CC coordinated with the developer. CVE-2025-24845 This vulnerability was reported to IPA under the Information Security Early Warning Partnership, and JPCERT/CC coordinated with the developer.