Skip to content
OpenAdvisories
High MSRC-CVE-2026-61936 1 CVE

Windows Defender Firewall Service Security Feature Bypass Vulnerability

Published Aug 11, 2026 · Updated Oct 9, 2026 · Revision 3

Vendor: Microsoft

Summary

Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

Details

What kind of security feature could be bypassed by successfully exploiting this vulnerability?
This vulnerability could allow an attacker to bypass an access control mechanism that is designed to restrict a sensitive debugging interface to administrators only.
By bypassing this check, a standard authenticated user could gain unauthorized access to functionality that is intended to be limited to highly privileged users, weakening protections that enforce administrative boundaries on debugging capabilities.

Security updates
10.0.17763.9121 — https://support.microsoft.com/help/5120238
10.0.20348.5499 — https://support.microsoft.com/help/5120242
10.0.20348.5440 — https://support.microsoft.com/help/5120229
10.0.19044.7663 — https://support.microsoft.com/help/5120249
10.0.26100.33296 — https://support.microsoft.com/help/5120233
10.0.26100.33222 — https://support.microsoft.com/help/5120228
10.0.26200.9168 — https://support.microsoft.com/help/5121003
10.0.26200.9106 — https://support.microsoft.com/help/5120994
10.0.22631.7517 — https://support.microsoft.com/help/5120240
10.0.28000.2704 — https://support.microsoft.com/help/5121000

Vulnerabilities 1

Revision history

  1. #3

    Updated an acknowledgement. This is an informational change only.

  2. #2

    Updated an acknowledgement. This is an informational change only.

  3. #1

    Information published.

References