Most recent entries from all

EUVD-2026-215102

fkie_cve-2025-22894

Unprotected Windows messaging channel ('Shatter') issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker sends a specially crafted message to the specific process of the Windows system where the product is running, arbitrary files in the system may be altered. As a result, an arbitrary DLL may be executed with SYSTEM privilege.

GHSA-rc3f-g789-3fg8

jvndb-2025-000008

Defense Platform Home Edition provided by Humming Heads Inc. contains multiple vulnerabilities listed below. <ul><li>Improper handling of message in specific process (CWE-422) - CVE-2025-20094</li> <li>Execution with unnecessary privileges (CWE-250) - CVE-2025-22890</li> <li>Improper handling of message in specific process (CWE-422) - CVE-2025-22894</li> <li>Buffer overflow vulnerability in DeviceIoControl (CWE-120) - CVE-2025-23236</li> <li>NULL pointer dereference vulnerability in DeviceIoControl (CWE-476) - CVE-2025-24483</li> <li>Argument injection vulnerability in DPprd.sys and DPavd.sys (CWE-88) - CVE-2025-24845</li></ul> CVE-2025-20094, CVE-2025-22890, CVE-2025-22894, CVE-2025-23236, CVE-2025-24483 Taizoh Tsukamoto of Mitsui Bussan Secure Directions, Inc. reported these vulnerabilities to JPCERT/CC. JPCERT/CC coordinated with the developer. CVE-2025-24845 This vulnerability was reported to IPA under the Information Security Early Warning Partnership, and JPCERT/CC coordinated with the developer.