MSRC-CVE-2025-62468 — Windows Defender Firewall Service Information Disclosure Vulnerability

Summary

Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

Details

What type of information could be disclosed by this vulnerability?
An attacker who successfully exploited this vulnerability could potentially read portions of data segment of the module.

Security updates
10.0.26100.7462 — https://support.microsoft.com/help/5072033
10.0.26100.7392 — https://support.microsoft.com/help/5072014
10.0.22631.6345 — https://support.microsoft.com/help/5071417
10.0.25398.2025 — https://support.microsoft.com/help/5071542

Vulnerabilities 1

Medium 5.5

CVE-2025-62468

Windows Defender Firewall Service Information Disclosure Vulnerability

Out-of-bounds read in Windows Defender Firewall Service allows an authorized attacker to disclose information locally.

Microsoft Windows Server 2025 Windows Server 2025 (Server Core installation) Windows 11 Version 24H2 Windows

Dec 9, 2025

Revision history

2025-12-12 #2
Corrected CVSS Privileges metric to PR:L, corrected Exploitability assessment to Expoitation More Likely, and updated FAQs. These are informational changes only.
2025-12-09 #1
Information published.

References

CVE-2025-62468 Windows Defender Firewall Service Information Disclosure Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62468
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss