CVE-2025-10475

A weakness has been identified in SpyShelter up to 15.4.0.1015. Affected is an unknown function in the library SpyShelter.sys of the component IOCTL Handler. This manipulation causes denial of service. The attack needs to be launched locally. The exploit has been made available to the public and could be exploited. Upgrading to version 15.4.0.1028 is able to address this issue. It is advisable to upgrade the affected component.

CVSS v4.0

5.4 MEDIUMCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS v3.1

5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CVSS v2.0

4.6 MEDIUMAV:L/AC:L/Au:S/C:N/I:N/A:C

EPSS

0.15% chance of exploitation in the next 30 days, 4th percentile

Published

2025-09-15

Proof-of-concept exploits (1)

• https://www.yuque.com/u28538081/sea4q5/aokhgdfpf5ueguk5

References

• CVE Record
• NVD entry

Related

• CVE-2025-10473
• CVE-2025-10477
• CVE-2025-10472
• CVE-2025-10479
• CVE-2025-10471
• CVE-2025-10480