Product:
Windows Defender Firewall Service
Summary
Out-of-bounds read in Windows Defender Firewall Service allows an authorized attacker to disclose information locally. This vulnerability can lead to unauthorized access to sensitive information. It requires high privileges to exploit, making it a concern for systems with multiple users.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4.4 | CVE-2025-62468 |
Exploitation
To exploit this vulnerability, an attacker with high privileges must execute a specially crafted request to the Windows Defender Firewall Service. This can lead to an out-of-bounds read, allowing the attacker to access sensitive information stored in memory. The attack is local, meaning it must be executed on the affected system.
Affected Products
- Windows Defender Firewall Service: Vulnerable to out-of-bounds read, allowing information disclosure.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Microsoft. Additionally, limiting user privileges and monitoring system access can help reduce the risk of exploitation. Regularly reviewing security configurations can also enhance overall system security.