CVE-2025-61303 | Hatching Triage Sandbox Windows 10 build 2004 (2025-08-14) a… | CVSS 9.8 CRITICAL

Description

Hatching Triage Sandbox Windows 10 build 2004 (2025-08-14) and Windows 10 LTSC 2021(2025-08-14) contains a vulnerability in its Windows behavioral analysis engine that allows a submitted malware sample to evade detection and cause denial-of-analysis. The vulnerability is triggered when a sample recursively spawns a large number of child processes, generating high log volume and exhausting system resources. As a result, key malicious behavior, including PowerShell execution and reverse shell activity, may not be recorded or reported, misleading analysts and compromising the integrity and availability of sandboxed analysis results.

Metadata

CVE ID: CVE-2025-61303
State: PUBLISHED
Assigner: mitre
Reserved: 2025-09-26 00:00 UTC
Published: 2025-10-20 00:00 UTC
Last updated: 2025-10-21 13:47 UTC
Primary CWE: CWE-400
CWE-400 Uncontrolled Resource Consumption
Vendor / Product: n/a / n/a
Sources: cve.org · NVD

Severity & Metrics

9.8 CRITICAL CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC — CISA Coordinator

Exploitation: PoC
Automatable: yes
Tech. Impact: total

Affected products (1)

Vendor	Product	Platform	Versions
n/a	n/a	—	n/a

Weakness (CWE)

CWE	Source	Description
—	cna	n/a
CWE-400	adp	CWE-400 Uncontrolled Resource Consumption

CVSS scores (1)

Score	Severity	Version	Source	Vector
9.8	CRITICAL	3.1	adp	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References (1)

https://github.com/eGkritsis/CVE-2025-61303