CVE-2025-22894: Hummingheads Defense Platform

High severity, CVSS 8.8. EPSS: 0.1% chance of exploitation in the next 30 days.

Unprotected Windows messaging channel ('Shatter') issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker sends a specially crafted message to the specific process of the Windows system where the product is running, arbitrary files in the system may be altered. As a result, an arbitrary DLL may be executed with SYSTEM privilege.

Affected products

• Hummingheads Defense Platform: up to and including 3.9.51.0

Published 2025-02-06. Last modified 2026-06-17.