Skip to content
OpenAdvisories

Weakness (CWE)

CWE-422: Unprotected Windows Messaging Channel

Variant Draft

The product does not properly verify the source of a message in the Windows Messaging System while running at elevated privileges, creating an alternate channel through which an attacker can directly send a message to the product.

How to prevent it (1 mitigation)

  1. Architecture and Design

    Always verify and authenticate the source of the message.

Source: MITRE CWE-422

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed