CVE-2025-10475
SpyShelter IOCTL SpyShelter.sys denial of service
- State
- Published
- Severity
- 6.8 Medium
- Published
- Sep 15, 2025
- Updated
- Sep 15, 2025
- Reserved
- Sep 15, 2025
Description
A weakness has been identified in SpyShelter up to 15.4.0.1015. Affected is an unknown function in the library SpyShelter.sys of the component IOCTL Handler. This manipulation causes denial of service. The attack needs to be launched locally. The exploit has been made available to the public and could be exploited. Upgrading to version 15.4.0.1028 is able to address this issue. It is advisable to upgrade the affected component.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 6.8 Medium | CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P | VulDB |
| 3.1 | 5.5 Medium | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C | VulDB |
| 3.0 | 5.5 Medium | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C | VulDB |
| 2.0 | 4.6 Medium | AV:L/AC:L/Au:S/C:N/I:N/A:C/E:POC/RL:OF/RC:C | VulDB |
Weaknesses
- CWE-404 Denial of Service
Affected Products
| Product | Versions |
|---|---|
SpySheltern/a |
|
References
- VDB-323906 | SpyShelter IOCTL SpyShelter.sys denial of servicevdb-entry
- VDB-323906 | CTI Indicators (IOB, IOC, IOA)signaturepermissions-required
- Submit #648484 | SpyShelter <=15.4.0.1012 Local Privilege Escalationthird-party-advisory
- https://www.yuque.com/u28538081/sea4q5/aokhgdfpf5ueguk5exploit
- https://www.spyshelter.com/help/SpyShelter-Changelog#15401028-3sep2025release-notes
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.