CVE-2025-22894 - CVE House
Back to Database
Status published Medium CVE-2025-22894

Unprotected Windows messaging channel ('Shatter') issue exists in Defense Platform...

Vulnerability Description

Unprotected Windows messaging channel ('Shatter') issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker sends a specially crafted message to the specific process of the Windows system where the product is running, arbitrary files in the system may be altered. As a result, an arbitrary DLL may be executed with SYSTEM privilege.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-22894

Credits & Attribution

No credits recorded in the NVD database.

References

More from Humming Heads Inc.

View All →
CVE-2025-24845
Improper neutralization of argument delimiters in a command ('Argument Injection')...
Medium 6.3
CVE-2025-24483
NULL pointer dereference vulnerability exists in Defense Platform Home Edition...
Medium 6.5
CVE-2025-23236
Buffer overflow vulnerability exists in Defense Platform Home Edition Ver.3.9.51.x...
High 8.8
CVE-2025-22890
Execution with unnecessary privileges issue exists in Defense Platform Home...
Medium 6.5
CVE-2025-20094
Unprotected Windows messaging channel ('Shatter') issue exists in Defense Platform...
High 8.8

Affected Vendor

Humming Heads Inc.

View all reports →

Affected Software

Defense Platform Home Edition
Vulnerable Versions:
Ver.3.9.51.x and earlier

Timeline

Official Publish: February 6th, 2025
Last Modified: February 12th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N

Weaknesses (CWE)

CWE-422

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.