Microsoft Windows Defender Firewall Service Privilege Escalation Vulnerability

A type confusion vulnerability has been identified in the Windows Defender Firewall Service, allowing an authorized attacker to locally elevate privileges. This issue arises from accessing a resource with an incompatible type, creating a scenario where an attacker could manipulate the execution context to gain higher privileges.

Impact

Exploitation of this vulnerability could allow an attacker to elevate privileges from Medium Integrity Level to Local Service.

Remediation

Users can download the security update for this vulnerability via the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5065507, KB5065509, KB5065468, KB5065510, KB5065508, KB5065511, and KB5065508.