CVE-2025-54109 Windows Defender Firewall Service Elevation of Privilege Vulnerability
Summary
What it is: CVE-2025-54109 is an elevation-of-privilege (EoP) vulnerability described by Microsoft as "Access of resource using incompatible type ('type confusion')" in the Windows Defender Firewall...
If you manage servers, opening a port in the Windows Server firewall is one of those routine tasks that’s trivial to execute but easy to get wrong — and a single misconfiguration can expose services to the public internet. This feature explains the exact, supported ways to open ports in Windows...