CVE-2026-70568: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally...

CVE-2026-68831: Files or Directories Accessible to External Parties

Files or directories accessible to external parties in Windows Defender Firewall Service allows an authorized attacker to disclose information locally...

PT-2026-70453

Name of the Vulnerable Software and Affected Versions Windows Defender Firewall Service affected versions not specified Description Missing authorization in the Windows Defender Firewall Service allows an authorized attacker to locally bypass a security feature, which can affect the system...

CVE-2026-61936: Missing Authorization

Missing authorization in Windows Defender Firewall Service allows an authorized attacker to bypass a security feature locally...

CVE-2025-62468: Out-of-bounds Read

Out-of-bounds read in Windows Defender Firewall Service allows an authorized attacker to disclose information locally...

CVE-2025-54915

Access of resource using incompatible type 'type confusion' in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally...

CVE-2025-54109

Access of resource using incompatible type 'type confusion' in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally...

CVE-2025-54915: Access of Resource Using Incompatible Type

Access of resource using incompatible type 'type confusion' in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally...

CVE-2025-54109: Access of Resource Using Incompatible Type

Access of resource using incompatible type 'type confusion' in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally...

CVE-2025-54094: Access of Resource Using Incompatible Type

Access of resource using incompatible type 'type confusion' in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally...

CVE-2025-53810: Access of Resource Using Incompatible Type

Access of resource using incompatible type 'type confusion' in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally...

CVE-2025-53808: Access of Resource Using Incompatible Type

Access of resource using incompatible type 'type confusion' in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally...

CVE-2025-54104: Access of Resource Using Incompatible Type

Access of resource using incompatible type 'type confusion' in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally...