CVE-2025-10475 json
SpyShelter IOCTL SpyShelter.sys denial of service
published 2025-09-15 13 mo ago modified 2026-10-19 20 d ago also EUVD-2025-29239
- cvss
- 5.5
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.2%
- EPSS 0.2% chance of exploitation in 30 days, percentile 4%
- public exploits
- 0
- none known
Summary
A weakness has been identified in SpyShelter up to 15.4.0.1015. Affected is an unknown function in the library SpyShelter.sys of the component IOCTL Handler. This manipulation causes denial of service. The attack needs to be launched locally. The exploit has been made available to the public and could be exploited. Upgrading to version 15.4.0.1028 is able to address this issue. It is advisable to upgrade the affected component.
Patch / fix
- n/a SpyShelter 15.4.0.1028
CISA SSVC
- Exploitation
- Proof of concept is public
- Automatable
- no
- Technical impact
- partial
- Assessed
- 13 mo ago
Exploit prediction
0.15% chance of exploitation in the next 30 days, higher than 4% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- yuque.com https://www.yuque.com/u28538081/sea4q5/aokhgdfpf5ueguk5 referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 4.0 | 6.8 | CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P |
| CNA | 3.1 | 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C |
| CNA | 3.0 | 5.5 | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C |
| CNA | 2.0 | 4.6 | AV:L/AC:L/Au:S/C:N/I:N/A:C/E:POC/RL:OF/RC:C |
| CNA | 4.0 | 5.4 | CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
| CNA | 3.1 | 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
| CNA | 2.0 | 4.6 | AV:L/AC:L/Au:S/C:N/I:N/A:C |
Affected products
- n/a SpyShelter
Classification
- Weakness
-
- CWE-404 Improper Resource Shutdown or Release
References
-
yuque.com
/u28538081/sea4q5/aokhgdfpf5ueguk5
exploit
-
vuldb.com
/?id.323906
vdb-entry
-
vuldb.com
/?ctiid.323906
signature, permissions-required
-
vuldb.com
/?submit.648484
third-party-advisory
-
spyshelter.com
/help/SpyShelter-Changelog#15401028-3sep2025
release-notes
Sources
- CVE List CVE-2025-10475
- NVD CVE-2025-10475
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.