Unprotected Windows Messaging Channel
CWE-422
The product does not properly verify the source of a message in the Windows Messaging System while running at elevated privileges, creating an alternate channel through which an attacker can directly send a message to the product.
We track 2 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 8.8.
How this weakness is prevented
- Architecture and Design: Always verify and authenticate the source of the message.
Latest Unprotected Windows Messaging Channel vulnerabilities
- 8.8 High severity
Defense Platform Home Edition: Unprotected Windows Messaging Channel
Unprotected Windows messaging channel ('Shatter') issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker sends a specially crafted message to the specific process of the Windows system where the product is running, arbitrary fil
- 8.8 High severity
Defense Platform Home Edition: Unprotected Windows Messaging Channel
Unprotected Windows messaging channel ('Shatter') issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker sends a specially crafted message to the specific process of the Windows system where the product is running, arbitrary cod