CVE-2025-54569: Incorrect Authorization

In Malwarebytes Binisoft Windows Firewall Control before 6.16.0.0, the installer is vulnerable to local privilege escalation...

CVE-2024-25089: Improper Control of Generation of Code

Malwarebytes Binisoft Windows Firewall Control before 6.9.9.2 allows remote attackers to execute arbitrary code via gRPC named pipes...

CVE-2023-36631: Undefined Security Weakness

Lack of access control in wfc.exe in Malwarebytes Binisoft Windows Firewall Control 6.9.2.0 allows local unprivileged users to bypass Windows Firewall restrictions via the user interface's rules tab. NOTE: the vendor's perspective is "this is intended behavior as the application can be locked usi...

PT-2022-17102

Name of the Vulnerable Software and Affected Versions Malwarebytes Binisoft Windows Firewall Control versions prior to 6.8.1.0 Description The issue allows programs executed from the Tools tab to be used for privilege escalation. Recommendations For versions prior to 6.8.1.0, update to version...

CVE-2022-25150: Improper Privilege Management

In Malwarebytes Binisoft Windows Firewall Control before 6.8.1.0, programs executed from the Tools tab can be used to escalate privileges...