Out-of-bounds read in Windows Defender Firewall Service allows an authorized attacker to disclose information locally.

zetlyn/cve-nvd vulnerability cve CVE-2025-62468 cpe cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:* cpe cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:* cpe cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:* cpe cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:* cpe cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:* known 2025-12-09

https://nvd.nist.gov/vuln/detail/CVE-2025-62468

Properties

cvss	5.5 receipt Source NVD Its words `5.5` Read by `field:cve.metrics.cvssMetricV31[].cvssData.baseScore` Said since 2026-10-02 12:00 UTC Last answered 2026-10-04 18:16 UTC Original open at the source What the source handed over { "cve": { "affected": [ { "affectedData": [ { "platforms": [ "ARM64-based Systems" ], "product": "Windows 11 version 22H3", "vendor": "Microsoft", "versions": [ { "lessThan": "10.0.22631.6345", "status": "affected", "version": "10.0.22631.0", "versionType": "custom" } ] }, { "platforms": [ "x64-based Systems" ], "product": "Windows 11 Version 23H2", "vendor": "Microsoft", "versions": [ { "lessThan": "10.0.22631.6345", "status": "affected", "version": "10.0.22631.0", "versionType": "custom" } ] }, { "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "product": "Windows 11 Version 24H2", "vendor": "Microsoft", "versions": [ { "lessThan": "10.0.26100.7462", "status": "affected", "version": "10.0.26100.0", "versionType": "custom" } ] }, { "product": "Windows 11 Version 25H2", "vendor": "Microsoft", "versions": [ { "lessThan": "10.0.26200.7462", "status": "affected", "version": "10.0.26200.0", "versionType": "custom" } ] }, { "platforms": [ "x64-based Systems" ], "product": "Windows Server 2022, 23H2 Edition (Server Core installation)", "vendor": "Microsoft", "versions": [ { "lessThan": "10.0.25398.2025", "status": "affected", "version": "10.0.25398.0", "versionType": "custom" } ] }, { "platforms": [ "x64-based Systems" ], "product": "Windows Server 2025", "vendor": "Microsoft", "versions": [ { "lessThan": "10.0.26100.7462", "status": "affected", "version": "10.0.26100.0", "versionType": "custom" } ] }, { "platforms": [ "x64-based Systems" ], "product": "Windows Server 2025 (Server Core installation)", "vendor": "Microsoft", "versions": [ { "lessThan": "10.0.26100.7462", "status": "affected", "version": "10.0.26100.0", "versionType": "custom" } ] } ], "source": "secure@microsoft.com" } ], "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:microsoft:windows_11_23h2::::::::", "matchCriteriaId": "6DCE32D0-A9E0-4029-AB35-5E202A42AF01", "versionEndExcluding": "10.0.22631.6345", "vulnerable": true }, { "criteria": "cpe:2.3:o:microsoft:windows_11_24h2::::::::", "matchCriteriaId": "8DCD2A6E-7CD0-4FCC-AC11-5A1470776C24", "versionEndExcluding": "10.0.26100.7392", "vulnerable": true }, { "criteria": "cpe:2.3:o:microsoft:windows_11_25h2::::::::", "matchCriteriaId": "8EA08CDD-D682-403D-8B50-879EB4D88C67", "versionEndExcluding": "10.0.26200.7392", "vulnerable": true }, { "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2::::::::", "matchCriteriaId": "E9CE4A36-DA42-40CC-8724-E30A22CA84B6", "versionEndExcluding": "10.0.25398.2025", "vulnerable": true }, { "criteria": "cpe:2.3:o:microsoft:windows_server_2025::::::::", "matchCriteriaId": "35BBEADA-D039-479B-A1BA-B2A7E37235BE", "versionEndExcluding": "10.0.26100.7392", "vulnerable": true } ], "negate": false, "operator": "OR" } ] } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "Out-of-bounds read in Windows Defender Firewall Service allows an authorized attacker to disclose information locally." }, { "lang": "es", "value": "Lectura fuera de límites en el Servicio de Cortafuegos de Windows Defender permite a un atacante autorizado divulgar información localmente." } ], "id": "CVE-2025-62468", "lastModified": "2026-09-30T20:10:00.247", "metrics": { "cvssMetricV31": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "secure@microsoft.com", "type": "Secondary" } ], "ssvcV203": [ { "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": { "id": "CVE-2025-62468", "options": [ { "exploitation": "none" }, { "automatable": "no" }, { "technicalImpact": "partial" } ], "role": "CISA Coordinator", "timestamp": "2025-12-09T20:14:35.384339Z", "version": "2.0.3" } } ] }, "published": "2025-12-09T18:15:58.893", "references": [ { "source": "secure@microsoft.com", "tags": [ "Vendor Advisory" ], "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62468" } ], "sourceIdentifier": "secure@microsoft.com", "vulnStatus": "Modified", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-125" } ], "source": "secure@microsoft.com", "type": "Secondary" } ] } }
product	Windows 11 version 22H3 receipt Source NVD Its words `Windows 11 version 22H3` Read by `field:cve.affected[].affectedData[].product` Said since 2026-10-02 12:00 UTC Last answered 2026-10-04 18:16 UTC Original open at the source What the source handed over { "cve": { "affected": [ { "affectedData": [ { "platforms": [ "ARM64-based Systems" ], "product": "Windows 11 version 22H3", "vendor": "Microsoft", "versions": [ { "lessThan": "10.0.22631.6345", "status": "affected", "version": "10.0.22631.0", "versionType": "custom" } ] }, { "platforms": [ "x64-based Systems" ], "product": "Windows 11 Version 23H2", "vendor": "Microsoft", "versions": [ { "lessThan": "10.0.22631.6345", "status": "affected", "version": "10.0.22631.0", "versionType": "custom" } ] }, { "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "product": "Windows 11 Version 24H2", "vendor": "Microsoft", "versions": [ { "lessThan": "10.0.26100.7462", "status": "affected", "version": "10.0.26100.0", "versionType": "custom" } ] }, { "product": "Windows 11 Version 25H2", "vendor": "Microsoft", "versions": [ { "lessThan": "10.0.26200.7462", "status": "affected", "version": "10.0.26200.0", "versionType": "custom" } ] }, { "platforms": [ "x64-based Systems" ], "product": "Windows Server 2022, 23H2 Edition (Server Core installation)", "vendor": "Microsoft", "versions": [ { "lessThan": "10.0.25398.2025", "status": "affected", "version": "10.0.25398.0", "versionType": "custom" } ] }, { "platforms": [ "x64-based Systems" ], "product": "Windows Server 2025", "vendor": "Microsoft", "versions": [ { "lessThan": "10.0.26100.7462", "status": "affected", "version": "10.0.26100.0", "versionType": "custom" } ] }, { "platforms": [ "x64-based Systems" ], "product": "Windows Server 2025 (Server Core installation)", "vendor": "Microsoft", "versions": [ { "lessThan": "10.0.26100.7462", "status": "affected", "version": "10.0.26100.0", "versionType": "custom" } ] } ], "source": "secure@microsoft.com" } ], "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:microsoft:windows_11_23h2::::::::", "matchCriteriaId": "6DCE32D0-A9E0-4029-AB35-5E202A42AF01", "versionEndExcluding": "10.0.22631.6345", "vulnerable": true }, { "criteria": "cpe:2.3:o:microsoft:windows_11_24h2::::::::", "matchCriteriaId": "8DCD2A6E-7CD0-4FCC-AC11-5A1470776C24", "versionEndExcluding": "10.0.26100.7392", "vulnerable": true }, { "criteria": "cpe:2.3:o:microsoft:windows_11_25h2::::::::", "matchCriteriaId": "8EA08CDD-D682-403D-8B50-879EB4D88C67", "versionEndExcluding": "10.0.26200.7392", "vulnerable": true }, { "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2::::::::", "matchCriteriaId": "E9CE4A36-DA42-40CC-8724-E30A22CA84B6", "versionEndExcluding": "10.0.25398.2025", "vulnerable": true }, { "criteria": "cpe:2.3:o:microsoft:windows_server_2025::::::::", "matchCriteriaId": "35BBEADA-D039-479B-A1BA-B2A7E37235BE", "versionEndExcluding": "10.0.26100.7392", "vulnerable": true } ], "negate": false, "operator": "OR" } ] } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "Out-of-bounds read in Windows Defender Firewall Service allows an authorized attacker to disclose information locally." }, { "lang": "es", "value": "Lectura fuera de límites en el Servicio de Cortafuegos de Windows Defender permite a un atacante autorizado divulgar información localmente." } ], "id": "CVE-2025-62468", "lastModified": "2026-09-30T20:10:00.247", "metrics": { "cvssMetricV31": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "secure@microsoft.com", "type": "Secondary" } ], "ssvcV203": [ { "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": { "id": "CVE-2025-62468", "options": [ { "exploitation": "none" }, { "automatable": "no" }, { "technicalImpact": "partial" } ], "role": "CISA Coordinator", "timestamp": "2025-12-09T20:14:35.384339Z", "version": "2.0.3" } } ] }, "published": "2025-12-09T18:15:58.893", "references": [ { "source": "secure@microsoft.com", "tags": [ "Vendor Advisory" ], "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62468" } ], "sourceIdentifier": "secure@microsoft.com", "vulnStatus": "Modified", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-125" } ], "source": "secure@microsoft.com", "type": "Secondary" } ] } }
status	Modified receipt Source NVD Its words `Modified` Read by `field:cve.vulnStatus` Said since 2026-10-02 12:00 UTC Last answered 2026-10-04 18:16 UTC Original open at the source What the source handed over { "cve": { "affected": [ { "affectedData": [ { "platforms": [ "ARM64-based Systems" ], "product": "Windows 11 version 22H3", "vendor": "Microsoft", "versions": [ { "lessThan": "10.0.22631.6345", "status": "affected", "version": "10.0.22631.0", "versionType": "custom" } ] }, { "platforms": [ "x64-based Systems" ], "product": "Windows 11 Version 23H2", "vendor": "Microsoft", "versions": [ { "lessThan": "10.0.22631.6345", "status": "affected", "version": "10.0.22631.0", "versionType": "custom" } ] }, { "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "product": "Windows 11 Version 24H2", "vendor": "Microsoft", "versions": [ { "lessThan": "10.0.26100.7462", "status": "affected", "version": "10.0.26100.0", "versionType": "custom" } ] }, { "product": "Windows 11 Version 25H2", "vendor": "Microsoft", "versions": [ { "lessThan": "10.0.26200.7462", "status": "affected", "version": "10.0.26200.0", "versionType": "custom" } ] }, { "platforms": [ "x64-based Systems" ], "product": "Windows Server 2022, 23H2 Edition (Server Core installation)", "vendor": "Microsoft", "versions": [ { "lessThan": "10.0.25398.2025", "status": "affected", "version": "10.0.25398.0", "versionType": "custom" } ] }, { "platforms": [ "x64-based Systems" ], "product": "Windows Server 2025", "vendor": "Microsoft", "versions": [ { "lessThan": "10.0.26100.7462", "status": "affected", "version": "10.0.26100.0", "versionType": "custom" } ] }, { "platforms": [ "x64-based Systems" ], "product": "Windows Server 2025 (Server Core installation)", "vendor": "Microsoft", "versions": [ { "lessThan": "10.0.26100.7462", "status": "affected", "version": "10.0.26100.0", "versionType": "custom" } ] } ], "source": "secure@microsoft.com" } ], "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:microsoft:windows_11_23h2::::::::", "matchCriteriaId": "6DCE32D0-A9E0-4029-AB35-5E202A42AF01", "versionEndExcluding": "10.0.22631.6345", "vulnerable": true }, { "criteria": "cpe:2.3:o:microsoft:windows_11_24h2::::::::", "matchCriteriaId": "8DCD2A6E-7CD0-4FCC-AC11-5A1470776C24", "versionEndExcluding": "10.0.26100.7392", "vulnerable": true }, { "criteria": "cpe:2.3:o:microsoft:windows_11_25h2::::::::", "matchCriteriaId": "8EA08CDD-D682-403D-8B50-879EB4D88C67", "versionEndExcluding": "10.0.26200.7392", "vulnerable": true }, { "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2::::::::", "matchCriteriaId": "E9CE4A36-DA42-40CC-8724-E30A22CA84B6", "versionEndExcluding": "10.0.25398.2025", "vulnerable": true }, { "criteria": "cpe:2.3:o:microsoft:windows_server_2025::::::::", "matchCriteriaId": "35BBEADA-D039-479B-A1BA-B2A7E37235BE", "versionEndExcluding": "10.0.26100.7392", "vulnerable": true } ], "negate": false, "operator": "OR" } ] } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "Out-of-bounds read in Windows Defender Firewall Service allows an authorized attacker to disclose information locally." }, { "lang": "es", "value": "Lectura fuera de límites en el Servicio de Cortafuegos de Windows Defender permite a un atacante autorizado divulgar información localmente." } ], "id": "CVE-2025-62468", "lastModified": "2026-09-30T20:10:00.247", "metrics": { "cvssMetricV31": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "secure@microsoft.com", "type": "Secondary" } ], "ssvcV203": [ { "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": { "id": "CVE-2025-62468", "options": [ { "exploitation": "none" }, { "automatable": "no" }, { "technicalImpact": "partial" } ], "role": "CISA Coordinator", "timestamp": "2025-12-09T20:14:35.384339Z", "version": "2.0.3" } } ] }, "published": "2025-12-09T18:15:58.893", "references": [ { "source": "secure@microsoft.com", "tags": [ "Vendor Advisory" ], "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62468" } ], "sourceIdentifier": "secure@microsoft.com", "vulnStatus": "Modified", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-125" } ], "source": "secure@microsoft.com", "type": "Secondary" } ] } }
vendor	Microsoft receipt Source NVD Its words `Microsoft` Read by `field:cve.affected[].affectedData[].vendor` Said since 2026-10-02 12:00 UTC Last answered 2026-10-04 18:16 UTC Original open at the source What the source handed over { "cve": { "affected": [ { "affectedData": [ { "platforms": [ "ARM64-based Systems" ], "product": "Windows 11 version 22H3", "vendor": "Microsoft", "versions": [ { "lessThan": "10.0.22631.6345", "status": "affected", "version": "10.0.22631.0", "versionType": "custom" } ] }, { "platforms": [ "x64-based Systems" ], "product": "Windows 11 Version 23H2", "vendor": "Microsoft", "versions": [ { "lessThan": "10.0.22631.6345", "status": "affected", "version": "10.0.22631.0", "versionType": "custom" } ] }, { "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "product": "Windows 11 Version 24H2", "vendor": "Microsoft", "versions": [ { "lessThan": "10.0.26100.7462", "status": "affected", "version": "10.0.26100.0", "versionType": "custom" } ] }, { "product": "Windows 11 Version 25H2", "vendor": "Microsoft", "versions": [ { "lessThan": "10.0.26200.7462", "status": "affected", "version": "10.0.26200.0", "versionType": "custom" } ] }, { "platforms": [ "x64-based Systems" ], "product": "Windows Server 2022, 23H2 Edition (Server Core installation)", "vendor": "Microsoft", "versions": [ { "lessThan": "10.0.25398.2025", "status": "affected", "version": "10.0.25398.0", "versionType": "custom" } ] }, { "platforms": [ "x64-based Systems" ], "product": "Windows Server 2025", "vendor": "Microsoft", "versions": [ { "lessThan": "10.0.26100.7462", "status": "affected", "version": "10.0.26100.0", "versionType": "custom" } ] }, { "platforms": [ "x64-based Systems" ], "product": "Windows Server 2025 (Server Core installation)", "vendor": "Microsoft", "versions": [ { "lessThan": "10.0.26100.7462", "status": "affected", "version": "10.0.26100.0", "versionType": "custom" } ] } ], "source": "secure@microsoft.com" } ], "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:microsoft:windows_11_23h2::::::::", "matchCriteriaId": "6DCE32D0-A9E0-4029-AB35-5E202A42AF01", "versionEndExcluding": "10.0.22631.6345", "vulnerable": true }, { "criteria": "cpe:2.3:o:microsoft:windows_11_24h2::::::::", "matchCriteriaId": "8DCD2A6E-7CD0-4FCC-AC11-5A1470776C24", "versionEndExcluding": "10.0.26100.7392", "vulnerable": true }, { "criteria": "cpe:2.3:o:microsoft:windows_11_25h2::::::::", "matchCriteriaId": "8EA08CDD-D682-403D-8B50-879EB4D88C67", "versionEndExcluding": "10.0.26200.7392", "vulnerable": true }, { "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2::::::::", "matchCriteriaId": "E9CE4A36-DA42-40CC-8724-E30A22CA84B6", "versionEndExcluding": "10.0.25398.2025", "vulnerable": true }, { "criteria": "cpe:2.3:o:microsoft:windows_server_2025::::::::", "matchCriteriaId": "35BBEADA-D039-479B-A1BA-B2A7E37235BE", "versionEndExcluding": "10.0.26100.7392", "vulnerable": true } ], "negate": false, "operator": "OR" } ] } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "Out-of-bounds read in Windows Defender Firewall Service allows an authorized attacker to disclose information locally." }, { "lang": "es", "value": "Lectura fuera de límites en el Servicio de Cortafuegos de Windows Defender permite a un atacante autorizado divulgar información localmente." } ], "id": "CVE-2025-62468", "lastModified": "2026-09-30T20:10:00.247", "metrics": { "cvssMetricV31": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "secure@microsoft.com", "type": "Secondary" } ], "ssvcV203": [ { "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": { "id": "CVE-2025-62468", "options": [ { "exploitation": "none" }, { "automatable": "no" }, { "technicalImpact": "partial" } ], "role": "CISA Coordinator", "timestamp": "2025-12-09T20:14:35.384339Z", "version": "2.0.3" } } ] }, "published": "2025-12-09T18:15:58.893", "references": [ { "source": "secure@microsoft.com", "tags": [ "Vendor Advisory" ], "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62468" } ], "sourceIdentifier": "secure@microsoft.com", "vulnStatus": "Modified", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-125" } ], "source": "secure@microsoft.com", "type": "Secondary" } ] } }

Text

Out-of-bounds read in Windows Defender Firewall Service allows an authorized attacker to disclose information locally. Lectura fuera de límites en el Servicio de Cortafuegos de Windows Defender permite a un atacante autorizado divulgar información localmente.