CVE-2025-61303

Hatching Triage Sandbox Windows 10 build 2004 (2025-08-14) and Windows 10 LTSC 2021(2025-08-14) contains a vulnerability in its Windows behavioral analysis…

Critical · published October 20, 2025

CVSS v3.1
9.8
EPSS
0%
Percentile
38.6
In the wild
Unconfirmed
What it is

🔥 A sneaky recursive exploit is making waves! The Windows behavioral analysis engine can get overwhelmed by a flood of child processes, leaving it blind to malicious activities like PowerShell execution. 🚨 Imagine a restaurant that gets so busy handling multiple orders at once that it forgets to check for food allergies — the more orders come in, the greater the risk of serving up something dangerous without noticing. In this case, the malicious malware is the dish, and the vulnerability is the overwhelmed kitchen staff. This vulnerability can lead to absolutely devastating consequences! If the sandbox can't effectively track malware behaviors, attackers could carry out harmful actions without detection, putting sensitive data and systems at risk. Analysts might be left with skewed insights, potentially allowing malware to spread unchecked.

Put simply

Imagine a restaurant that gets so busy handling multiple orders at once that it forgets to check for food allergies — the more orders come in, the greater the risk of serving up something dangerous without noticing. In this case, the malicious malware is the dish, and the vulnerability is the overwhelmed kitchen staff. The vulnerability in the Windows behavioral analysis engine is triggered when a submitted malware sample recursively spawns a large number of child processes, overwhelming the system and preventing key malicious actions from being logged or reported properly.

What to do

This vulnerability can lead to absolutely devastating consequences! If the sandbox can't effectively track malware behaviors, attackers could carry out harmful actions without detection, putting sensitive data and systems at risk. Analysts might be left with skewed insights, potentially allowing malware to spread unchecked. Upgrade to the latest versions of Windows 10 build 2004 or LTSC 2021, as patches are likely to be rolled out to address this critical issue. Regularly monitor and analyze sandbox results for anomalies, and consider implementing additional resource management configurations to prevent exhaustion. 🛡️ You've got this! Stay vigilant, follow these steps, and you’ll ensure better protection against sneaky threats like this one! 💪✨

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00455 · 38.6th percentile
Published
2025-10-20T00:00Z
EPSS history
Timeline
  • 20 OCT 00:00Z
    Hatching Triage Sandbox Windows 10 build 2004 (2025-08-14) and Windows 10 LTSC 2021(2025-08-14) contains a vulnerability in its Windows behavioral analysis…
    cvelistv5