CVE-2022-25150

CVE-2022-25150 affects Malwarebytes Binisoft Windows Firewall Control prior to version 6.8.1.0. The vulnerability allows programs executed from the Tools tab to escalate privileges locally. The connected records confirm the affected product and the local privilege escalation impact; no explicit r...

CVE-2024-25089

CVE-2024-25089 affects Malwarebytes Binisoft Windows Firewall Control, prior to version 6.9.9.2. The vulnerability enables remote code execution via gRPC named pipes, with a CVSS v3.1 score of 9.8 (CRITICAL). Affected component is the Windows Firewall Control software and its gRPC named-pipe inte...

CVE-2023-36631

Malwarebytes Binisoft Windows Firewall Control (wfc.exe) version 6.9.2.0 is affected by a lack of access control that lets local, unprivileged users bypass Windows Firewall restrictions through the Rules tab in the UI. The vendor notes this as intended behavior when the application is password-lo...