CVE-2025-54915

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-843

Affected software

No affected versions have been published.

Timeline

Published: Sep 9, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-549167.8Stack-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.CVE-2025-549174.3Protection mechanism failure in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network.CVE-2025-549188.8Improper authentication in Windows NTLM allows an authorized attacker to elevate privileges over a network.CVE-2025-549197.5Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized at CVE-2025-54928.8A vulnerability has been found in D-Link DI-500WF-WT up to 20250511 and classified as critical. Affected by this vulnerability is the functi CVE-2025-549208.8This issue affects Apache Spark: before 3.5.7 and 4.0.1. Users are recommended to upgrade to version 3.5.7 or 4.0.1 and above, which fixes t CVE-2025-549238.7CWE-502: Deserialization of Untrusted Data vulnerability exists that could cause remote code execution and compromise of system integrity wh CVE-2025-549247.5CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized access to sensitive data when an attacker sen CVE-2025-549257.5CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized access to sensitive data when an attacker con CVE-2025-549267.2CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause remote code exe CVE-2025-549274.9CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause unauthorized ac CVE-2025-54939.8A vulnerability was found in Baison Channel Middleware Product 2.0.1 and classified as critical. Affected by this issue is some unknown func