cve.bz

CWE-422: Unprotected Windows Messaging Channel (Shatter)

Filter

The product does not properly verify the source of a message in the Windows Messaging System while running at elevated privileges, creating an alternate channel through which an attacker can directly send a message to the product.

What the weakness is: CWE-422 at MITRE. All weaknesses

Ask an AI about CWE-422

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-422: Unprotected Windows Messaging Channel and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/422.html and https://cve.bz/cve/cwe/422?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 8.8CVE-2025-22894EPSS 0.1%

    Unprotected Windows messaging channel ('Shatter') issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker sends a specially crafted message to the specific process of the Windows system where the product is r…

  2. 8.8CVE-2025-20094EPSS 0.2%

    Unprotected Windows messaging channel ('Shatter') issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker sends a specially crafted message to the specific process of the Windows system where the product is r…