Microsoft has disclosed four new elevation of privilege vulnerabilities in the Windows Defender Firewall Service, allowing local attackers to gain SYSTEM-level access. These Type Confusion flaws can be exploited to bypass security boundaries and compromise the entire system. Immediate deployment of the September 2025 security updates is crucial to mitigate this risk.
Latest mentioned: 09-12
Earliest mentioned: 09-10