CVE-2025-69783

OpenEDR version 2.5.1.0 contains a security vulnerability where a local attacker can bypass the software's self-defense mechanism . By renaming a malicious executable to match a trusted process name (such as csrss.exe, edrsvc.exe, or edrcon.exe), an attacker can gain unauthorized interaction with...

CVE-2025-69784

A local, non-privileged attacker can exploit a vulnerable IOCTL interface in the OpenEDR 2.5.1.0 kernel driver to modify the product's DLL injection path . By redirecting this path to a user-writable location, an attacker can force OpenEDR to load an attacker-controlled DLL into high-privilege pr...