CVE-2026-83679
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk23th percentile - higher than 23% of all known CVEs
Summary
Use after free in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker could exploit the flaw to escalate privileges and gain full control of the system, potentially leading to security compromise.
Recommendation
Apply the latest Windows security updates to remediate this vulnerability.
Other vulnerabilities in Windows Defender Firewall Service
See all- CVE-2026-70568High
Heap-based buffer overflow in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-68831Medium
A vulnerability in the Windows Defender Firewall Service involves files or directories accessible to external parties. An authorized attacker could exploit this to disclose information locally.
- CVE-2026-61936Medium
Missing authorization in Windows Defender Firewall Service allows an authorized attacker to bypass a security feature locally.
- CVE-2025-62468Medium
Out-of-bounds read in Windows Defender Firewall Service allows an authorized attacker to disclose information locally.
Original NVD description (English source)
Use after free in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS