Microsoft Windows Defender Firewall Service Privilege Escalation Vulnerability

A type confusion vulnerability has been identified in the Windows Defender Firewall Service, allowing an authorized attacker to locally elevate privileges. This issue arises from the service's handling of resources using incompatible types, creating an opportunity for privilege escalation.

Impact

Exploitation of this vulnerability could allow an attacker to elevate privileges from Medium Integrity Level to Local Service.

Remediation

Users can apply the security update for this vulnerability through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5065430, KB5065426, KB5065431, KB5065429, and KB5065425.