Windows Defender Firewall Service Vulnerability Let Attackers Disclose Sensitive Data

Cybersecuritynews •Abinaya • December 11, 2025

A critical information disclosure vulnerability in Windows Defender Firewall Service, which could allow authorized attackers to access sensitive heap memory on affected systems. The vulnerability, tracked as CVE-2025-62468, was assigned an Important severity rating and released on December 9, 2025. The flaw stems from an out-of-bounds read condition in the Windows Defender Firewall Service component. […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerability in Windows Defender Firewall Exposes Sensitive Data Microsoft has disclosed a critical vulnerability in the Windows Defender Firewall Service that allows attackers with elevated privileges to access sensitive data. This flaw poses significant risks to users relying on the firewall for protection against cyber threats. 3 sources 37

Extracted Entities

Windows Defender Firewall Service Vulnerability Let Attackers Disclose Sensitive Data

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

Platforms (1)