Type Confusion Vulnerability in Windows Defender Firewall by Microsoft
CVE-2025-54915
6.7MEDIUM
Key Information:
- Vendor
Microsoft
- Status
- Vendor
- CVE Published:
- 9 September 2025
What is CVE-2025-54915?
A type confusion vulnerability in Windows Defender Firewall Service permits an authorized attacker to exploit resource access and gain elevated privileges on the local system. This flaw could allow potential misuse by attackers to execute malicious code under elevated privileges, which may lead to unauthorized actions within the system. Mitigation strategies include ensuring that software is updated and adhering to best security practices.
Affected Version(s)
Windows 10 Version 1507 32-bit Systems 10.0.10240.0 < 10.0.10240.21128
Windows 10 Version 1607 32-bit Systems 10.0.14393.0 < 10.0.14393.8422
Windows 10 Version 1809 32-bit Systems 10.0.17763.0 < 10.0.17763.7792