CVE-2025-22894 — Humming Heads Inc. / Defense Platform Home Edition

CVE-2025-22894

Humming Heads Inc. / Defense Platform Home Edition PUBLISHED

Description (CNA)

Unprotected Windows messaging channel ('Shatter') issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker sends a specially crafted message to the specific process of the Windows system where the product is running, arbitrary files in the system may be altered. As a result, an arbitrary DLL may be executed with SYSTEM privilege.

Affected (CNA)

Vendor / product	Versions
Humming Heads Inc. / Defense Platform Home Edition	affected Ver.3.9.51.x and earlier

CWE

CWE-422

References

https://www.hummingheads.co.jp/dep/storelist/
https://jvn.jp/en/jp/JVN66673020/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.