Defense Platform

6 CVEs product

Monthly

CVE-2025-24845 MEDIUM This Month

Improper neutralization of argument delimiters in a command ('Argument Injection') issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Microsoft Code Injection Defense Platform Windows
NVD
CVSS 3.1
5.5
EPSS
0.1%
CVE-2025-24483 MEDIUM This Month

NULL pointer dereference vulnerability exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Microsoft Null Pointer Dereference Denial Of Service Defense Platform Windows
NVD
CVSS 3.1
5.5
EPSS
0.0%
CVE-2025-23236 HIGH This Week

Buffer overflow vulnerability exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. Rated high severity (CVSS 8.8), this vulnerability is low attack complexity. No vendor patch available.

Microsoft Buffer Overflow Defense Platform Windows
NVD
CVSS 3.0
8.8
EPSS
0.1%
CVE-2025-22894 HIGH This Week

Unprotected Windows messaging channel ('Shatter') issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. Rated high severity (CVSS 8.8), this vulnerability is low attack complexity. No vendor patch available.

Microsoft Information Disclosure Defense Platform Windows
NVD
CVSS 3.1
8.8
EPSS
0.0%
CVE-2025-20094 HIGH This Week

Unprotected Windows messaging channel ('Shatter') issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. Rated high severity (CVSS 8.8), this vulnerability is low attack complexity. No vendor patch available.

Microsoft RCE Defense Platform Windows
NVD
CVSS 3.0
8.8
EPSS
0.0%
CVE-2025-22890 HIGH This Week

Execution with unnecessary privileges issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. Rated high severity (CVSS 8.8), this vulnerability is low attack complexity. No vendor patch available.

Microsoft Privilege Escalation Defense Platform Windows
NVD
CVSS 3.1
8.8
EPSS
0.0%
CVE-2025-24845
EPSS 0% CVSS 5.5
MEDIUM This Month

Improper neutralization of argument delimiters in a command ('Argument Injection') issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Microsoft Code Injection Defense Platform +1
NVD
CVE-2025-24483
EPSS 0% CVSS 5.5
MEDIUM This Month

NULL pointer dereference vulnerability exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Microsoft Null Pointer Dereference Denial Of Service +2
NVD
CVE-2025-23236
EPSS 0% CVSS 8.8
HIGH This Week

Buffer overflow vulnerability exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. Rated high severity (CVSS 8.8), this vulnerability is low attack complexity. No vendor patch available.

Microsoft Buffer Overflow Defense Platform +1
NVD
CVE-2025-22894
EPSS 0% CVSS 8.8
HIGH This Week

Unprotected Windows messaging channel ('Shatter') issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. Rated high severity (CVSS 8.8), this vulnerability is low attack complexity. No vendor patch available.

Microsoft Information Disclosure Defense Platform +1
NVD
CVE-2025-20094
EPSS 0% CVSS 8.8
HIGH This Week

Unprotected Windows messaging channel ('Shatter') issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. Rated high severity (CVSS 8.8), this vulnerability is low attack complexity. No vendor patch available.

Microsoft RCE Defense Platform +1
NVD
CVE-2025-22890
EPSS 0% CVSS 8.8
HIGH This Week

Execution with unnecessary privileges issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. Rated high severity (CVSS 8.8), this vulnerability is low attack complexity. No vendor patch available.

Microsoft Privilege Escalation Defense Platform +1
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy