Microsoft Windows Defender Firewall Service Privilege Escalation Vulnerability

A type confusion vulnerability has been identified in the Windows Defender Firewall Service, allowing an authorized attacker to locally elevate privileges. This issue arises from the service's access of resources using incompatible types.

Impact

Exploitation of this vulnerability could allow an attacker to elevate privileges from Medium Integrity Level to Local Service.

Remediation

Users can download the security update for this vulnerability via the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5065507, KB5065509, KB5065468, KB5065510, KB5065508, KB5065511.