CVE-2016-20091: Windows Firewall Control 4.8.6.0 Unquoted Service Path Privilege Escalation

Security readout for executives and security teams

CVE-2016-20091 affects Binisoft Windows Firewall Control 4.8.6.0. A local low-privilege user could abuse an unquoted service path so the service runs an attacker-controlled executable as LocalSystem after service restart or reboot. This is endpoint privilege escalation, not remote entry by itself. Exposure is limited to Windows systems running Binisoft Windows Firewall Control version 4.8.6.0 with the vulnerable service configuration. Internet exposure is not indicated; attacker foothold or local account access is required first. Prioritize remediation on shared workstations, servers, and managed endpoints where standard users can log in. The issue can turn a limited local compromise into full system control, but sources do not show remote exploitation or active abuse. Mitigation focus: Inventory Windows Firewall Control installations and identify version 4.8.6.0.; Check vendor guidance for fixed or supported versions before changing production systems.; Upgrade, replace, or remove affected installations where vendor remediation is available..

Prepared

Jun 24, 2026, 10:58 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.