CVE-2025-10475

SpyShelter IOCTL SpyShelter.sys denial of service

CVSS 6.8 MEDIUMEPSS 0.1%CWE-404

Vexday Risk Score

13Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 6.8EPSS 0.1%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

15 set 2025Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

A weakness has been identified in SpyShelter up to 15.4.0.1015. Affected is an unknown function in the library SpyShelter.sys of the component IOCTL Handler. This manipulation causes denial of service. The attack needs to be launched locally. The exploit has been made available to the public and could be exploited. Upgrading to version 15.4.0.1028 is able to address this issue. It is advisable to upgrade the affected component.

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P

Produtos afetados

n/a · SpyShelter

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://vuldb.com/?ctiid.323906 https://vuldb.com/?id.323906 https://vuldb.com/?submit.648484 https://www.spyshelter.com/help/SpyShelter-Changelog#15401028-3sep2025 https://www.yuque.com/u28538081/sea4q5/aokhgdfpf5ueguk5