CVE-2025-54104

Access of resource using incompatible type 'type confusion' in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally...

CVE-2025-54094

Access of resource using incompatible type 'type confusion' in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally...

CVE-2025-53808

Access of resource using incompatible type 'type confusion' in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally...

CVE-2025-53808

Access of resource using incompatible type 'type confusion' in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally...

CVE-2025-54915

CVE-2025-54915 describes a type-confusion vulnerability in the Windows Defender Firewall Service that could allow a locally authenticated attacker with high privileges to elevate to a higher level of access. The linked sources confirm the CVE exists and cite Defender Firewall Service as the affec...

CVE-2025-54109

CVE-2025-54109 affects Windows Defender Firewall Service. The vulnerability is described as a type confusion that can enable local privilege escalation by an authorized attacker. Connected sources (NCSC advisory) list CVE-2025-54109 with a base score of 6.7 (Medium) and attribute the impact to lo...

CVE-2025-54104

CVE-2025-54104 affects Windows Defender Firewall Service. The vulnerability is described as a type confusion (incompatible type) issue that could enable a locally authenticated attacker to elevate privileges. Related connected docs (NCSC) list Defender Firewall Service and classify the impact as ...

CVE-2025-54104 Windows Defender Firewall Service Elevation of Privilege Vulnerability

...

CVE-2025-54104 Windows Defender Firewall Service Elevation of Privilege Vulnerability

...

CVE-2025-54094 Windows Defender Firewall Service Elevation of Privilege Vulnerability

...

CVE-2025-53810 Windows Defender Firewall Service Elevation of Privilege Vulnerability

...

CVE-2025-53808 Windows Defender Firewall Service Elevation of Privilege Vulnerability

...

Windows Defender Firewall Service Elevation of Privilege Vulnerability

Access of resource using incompatible type 'type confusion' in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally...

Windows Defender Firewall Service Elevation of Privilege Vulnerability

Access of resource using incompatible type 'type confusion' in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally...

Windows Defender Firewall Service Elevation of Privilege Vulnerability

Access of resource using incompatible type 'type confusion' in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally...

PT-2025-36831

Name of the Vulnerable Software and Affected Versions: Windows Defender Firewall Service affected versions not specified Description: A type confusion issue in the Windows Defender Firewall Service can allow a locally authenticated attacker to gain elevated privileges. This issue allows attackers...

PT-2025-36833

Name of the Vulnerable Software and Affected Versions: Windows Defender Firewall Service affected versions not specified Description: A type confusion issue in the Windows Defender Firewall Service can allow a locally authenticated attacker to gain elevated privileges. This issue allows attackers...

PT-2025-36846

Name of the Vulnerable Software and Affected Versions: Windows Defender Firewall Service affected versions not specified Description: A type confusion issue in the Windows Defender Firewall Service can allow a locally authorized attacker to elevate privileges. This issue allows attackers to affec...

PT-2025-36837

Name of the Vulnerable Software and Affected Versions: Windows Defender Firewall Service affected versions not specified Description: A type confusion issue in the Windows Defender Firewall Service can allow a locally authorized attacker to elevate privileges. This issue allows attackers to affec...

KLA87445 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to gain privileges, bypass security restrictions, execute arbitrary code, cause denial of service, obtain sensitive information. Below is a complete list of...