8693 matches found
CVE-2025-24483
NULL pointer dereference vulnerability exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker provides specially crafted data to the specific process of the Windows system where the product is running, the system may cause a Blue Screen of Death BSOD, and as a result,...
CVE-2025-23236
Buffer overflow vulnerability exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker performs a specific operation, SYSTEM privilege of the Windows system where the product is running may be obtained...
CVE-2025-23236
CVE-2025-23236 is part of multiple vulnerabilities in Defense Platform Home Edition (Ver.3.9.51.x and earlier). The issue is a buffer overflow in DeviceIoControl that could allow an attacker to obtain SYSTEM privileges on Windows. Other CVEs in the same advisory (e.g., CVE-2025-20094, CVE-2025-22...
CVE-2025-20094
Unprotected Windows messaging channel 'Shatter' issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker sends a specially crafted message to the specific process of the Windows system where the product is running, arbitrary code may be executed with SYSTEM privilege...
CVE-2025-20094
Defense Platform Home Edition (Version 3.9.51.x and earlier) is affected by CVE-2025-20094 due to an unprotected Windows messaging channel (“Shatter”). The issue allows an attacker to send a specially crafted message to a specific Windows process, potentially executing arbitrary code with SYSTEM ...
CVE-2025-22890
Execution with unnecessary privileges issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker performs a specific operation, SYSTEM privilege of the Windows system where the product is running may be obtained...
PT-2025-5804
Name of the Vulnerable Software and Affected Versions: Defense Platform Home Edition versions 3.9.51.x and earlier Description: The issue is related to an unprotected Windows messaging channel, also known as 'Shatter'. This allows an attacker to send a specially crafted message to a specific...
CVE-2025-24483: NULL Pointer Dereference
NULL pointer dereference vulnerability exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker provides specially crafted data to the specific process of the Windows system where the product is running, the system may cause a Blue Screen of Death BSOD, and as a result,...
PT-2025-5802
Name of the Vulnerable Software and Affected Versions: Defense Platform Home Edition versions 3.9.51.x and earlier Description: The issue allows an attacker to obtain SYSTEM privilege of the Windows system where the product is running by performing a specific operation. This is due to an executio...
CVE-2025-20094: Unprotected Windows Messaging Channel
Unprotected Windows messaging channel 'Shatter' issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker sends a specially crafted message to the specific process of the Windows system where the product is running, arbitrary code may be executed with SYSTEM privilege...
PT-2025-5805
Name of the Vulnerable Software and Affected Versions Defense Platform Home Edition versions 3.9.51.x and earlier Description A buffer overflow issue exists, allowing a remote attacker to potentially gain SYSTEM privileges of the Windows system where the product is installed, by performing a...
PT-2025-5807 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Defense Platform Home Edition versions 3.9.51.x and earlier Description: The issue is related to improper neutralization of argument delimiters in a command, also known as 'Argument Injection'. This can cause a denial-of-service DoS condition...
PT-2025-5806 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Defense Platform Home Edition versions 3.9.51.x and earlier Description: A NULL pointer dereference issue exists, allowing an attacker to cause a denial-of-service DoS condition by providing specially crafted data to a specific process of the...
CVE-2025-24845: Improper Neutralization of Argument Delimiters in a Command
Improper neutralization of argument delimiters in a command 'Argument Injection' issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker provides specially crafted data to the specific process of the Windows system where the product is running, the system may cause ...
CVE-2025-23236: Buffer Copy without Checking Size of Input
Buffer overflow vulnerability exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker performs a specific operation, SYSTEM privilege of the Windows system where the product is running may be obtained...
CVE-2025-22894: Unprotected Windows Messaging Channel
Unprotected Windows messaging channel 'Shatter' issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker sends a specially crafted message to the specific process of the Windows system where the product is running, arbitrary files in the system may be altered. As a...
CVE-2025-22890: Execution with Unnecessary Privileges
Execution with unnecessary privileges issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker performs a specific operation, SYSTEM privilege of the Windows system where the product is running may be obtained...
PT-2025-5803
Name of the Vulnerable Software and Affected Versions: Defense Platform Home Edition versions 3.9.51.x and earlier Description: The issue exists due to an unprotected Windows messaging channel, also known as 'Shatter'. If an attacker sends a specially crafted message to the specific process of th...
CVE-2022-46869
Local privilege escalation during installation due to improper soft link handling. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40278, Acronis True Image OEM Windows before build 42575...