PT-2025-50168 · Microsoft · Windows Defender Firewall+1

Published 2025-12-09 · Updated 2025-12-13 · CVE-2025-62468

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Windows Defender Firewall Service (affected versions not specified)

Description An out-of-bounds read issue exists in Windows Defender Firewall Service, potentially allowing an attacker to disclose information locally. The issue allows attackers to obtain sensitive information and affect the system. An exploit for this issue was reportedly provided to Microsoft.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2025-15511

CVE-2025-62468

Affected Products

Windows

Windows Defender Firewall

References · 14

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62468 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-62468 · Security Note
• https://osv.dev/vulnerability/CVE-2025-62468 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2025-62468 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-62468 · Security Note
• https://bdu.fstec.ru/vul/2025-15511 · Security Note
• https://twitter.com/dailytechonx/status/1999163106493153551 · Twitter Post
• https://twitter.com/CVEnew/status/1998781349621047481 · Twitter Post
• https://twitter.com/KeyZ3r0/status/1998619416444190747 · Twitter Post
• https://twitter.com/karanjagtiani04/status/1998679835686670579 · Twitter Post
• https://reddit.com/r/CVEWatch/comments/1pliuy5/top_10_trending_cves_13122025 · Reddit Post
• https://twitter.com/The_SatyaDVV/status/1999002941953552901 · Twitter Post
• https://t.me/msrcreports/2546 · Telegram Post
• https://reddit.com/r/CVEWatch/comments/1pkxjis/top_10_trending_cves_12122025 · Reddit Post