CVE-2025-62468

Published Dec 9, 2025

Last updated a day ago

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-62468 is an out-of-bounds read vulnerability in the Windows Defender Firewall Service. An authenticated attacker with high-level privileges can exploit this vulnerability locally to retrieve sensitive information from the affected system. The vulnerability is classified as CWE-125, which means the program can read data beyond the intended buffer's end. To exploit this vulnerability, an attacker must already have access to the target machine and possess administrative credentials. If successful, the attacker can view sensitive data residing in the process memory that was not intended to be accessible. Microsoft has addressed this vulnerability as part of its December 2025 security updates.

Description
Out-of-bounds read in Windows Defender Firewall Service allows an authorized attacker to disclose information locally.
Source
secure@microsoft.com
NVD status
Modified
Products
windows_11_23h2, windows_11_24h2, windows_11_25h2, windows_server_2022_23h2, windows_server_2025

Risk scores

CVSS 3.1

Type
Primary
Base score
5.5
Impact score
3.6
Exploitability score
1.8
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Severity
MEDIUM

Weaknesses

secure@microsoft.com
CWE-125

Social media

Hype score
Not currently trending

Configurations

References

Sources include official advisories and independent security research.