CVE-2023-36631: Malwarebytes Binisoft Windows Firewall Control

High severity, CVSS 7.8. EPSS: 0.7% chance of exploitation in the next 30 days.

Lack of access control in wfc.exe in Malwarebytes Binisoft Windows Firewall Control 6.9.2.0 allows local unprivileged users to bypass Windows Firewall restrictions via the user interface's rules tab. NOTE: the vendor's perspective is "this is intended behavior as the application can be locked using a password."

Affected products

• Malwarebytes Binisoft Windows Firewall Control: version 6.9.2.0 only

Published 2023-06-26. Last modified 2026-06-17.