Windows Defender Firewall Service Vulnerability Let Attackers Disclose Sensitive Data

Microsoft disclosed CVE-2025-62468, an information-disclosure out-of-bounds read in the Windows Defender Firewall Service that allows high-privileged local attackers to read heap memory (CVSS 4.4). Patches and hotpatches are available for multiple Windows Server and Windows 11 builds; Microsoft reported no public exploit or active exploitation and assessed the likelihood of exploitation as unlikely.