Malwarebytes Binisoft Windows Firewall Control vulnerabilities

CVE-2024-25089 [CRITICAL] CWE-94 CVE-2024-25089: Malwarebytes Binisoft Windows Firewall Control before 6.9.9.2 allows remote attackers to execute arb Malwarebytes Binisoft Windows Firewall Control before 6.9.9.2 allows remote attackers to execute arbitrary code via gRPC named pipes.

CVE-2023-36631 [HIGH] CVE-2023-36631: Lack of access control in wfc.exe in Malwarebytes Binisoft Windows Firewall Control 6.9.2.0 allows l Lack of access control in wfc.exe in Malwarebytes Binisoft Windows Firewall Control 6.9.2.0 allows local unprivileged users to bypass Windows Firewall restrictions via the user interface's rules tab. NOTE: the vendor's perspective is "this is intended behavior as the application can be locked using a password."

CVE-2022-25150 [HIGH] CWE-269 CVE-2022-25150: In Malwarebytes Binisoft Windows Firewall Control before 6.8.1.0, programs executed from the Tools t In Malwarebytes Binisoft Windows Firewall Control before 6.8.1.0, programs executed from the Tools tab can be used to escalate privileges.

CVE-2025-54569 [MEDIUM] CWE-863 CVE-2025-54569: In Malwarebytes Binisoft Windows Firewall Control before 6.16.0.0, the installer is vulnerable to lo In Malwarebytes Binisoft Windows Firewall Control before 6.16.0.0, the installer is vulnerable to local privilege escalation.