CVE-2025-20094

State: Published
Severity: 8.8 High
Published: Feb 6, 2025
Updated: Feb 12, 2025
Reserved: Jan 27, 2025

Description

Unprotected Windows messaging channel ('Shatter') issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker sends a specially crafted message to the specific process of the Windows system where the product is running, arbitrary code may be executed with SYSTEM privilege.

Scores

CVSS	Score	Vector	Source
3.0	8.8 High	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H	jpcert

Weaknesses

CWE-422 Unprotected Windows Messaging Channel ('Shatter')

Affected Products

Product	Versions
Defense Platform Home EditionHumming Heads Inc.	Ver.3.9.51.x and earlierAffected

References

https://www.hummingheads.co.jp/dep/storelist/
https://jvn.jp/en/jp/JVN66673020/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.