Week of December 8, 2025

2025-12-08 — 2025-12-14 · 1 PUBLIC EVENT · GENERAL / NON-PERSONALIZED

In the week of December 8, 2025, ColdRecon logged 1 public endpoint-security event from open-source reporting — 1 vuln disclosure. Vendors in the record this week: OpenEDR.

The Week's Public Record

Events

2025-12-12

vuln disclosure

OpenEDR <= v2.5.1.0 Local Privilege Escalation via Self-Defense Bypass and DLL Injection Path ModificationCVE-2025-69783, CVE-2025-69784

Two critical vulnerabilities were disclosed in OpenEDR version 2.5.1.0 and earlier. CVE-2025-69783 allows bypassing the self-defense mechanism by spoofing the process name to gain trusted status. CVE-2025-69784 enables local privilege escalation by modifying the DLL injection path used by the EDR's user-mode injector, allowing an attacker to load a malicious DLL into a privileged process.

OpenEDR ↗ scavengersecurity.com (2025-12-12) ↗ www.sentinelone.com (2026-03-16)

Every event in this brief is a record in ColdRecon's canonical set, drawn from public open-source reporting and linked to its source. This is the general, non-personalized signal — published 7 days after the fact. The live daily brief, written for your deals, is for cleared officers.

This is last week, public. Get this morning's, written for you.

The live ColdRecon brief lands at 0600 daily — the same signal, filtered to your competitors and framed for your deals. Request clearance and tomorrow's is yours.

Request Clearance →