Read the docs

Microsoft

Records18046All Threatist records
Exploited (KEV)406In CISA KEV
CVSS critical2330CVSS 9.0–10.0
CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV
TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability Priority CRITICAL 99KEV 2026-10-27TI-2026-73128 Microsoft Windows Command Injection Vulnerability Priority CRITICAL 97KEV 2026-10-13TI-2026-46806 Microsoft SharePoint Code Injection Vulnerability Priority CRITICAL 97KEV 2026-09-25TI-2026-56567 Microsoft Windows Link Following Vulnerability Priority CRITICAL 93KEV 2026-09-08TI-2026-58845 Microsoft Windows Heap-Based Buffer Overflow Vulnerability Priority CRITICAL 93KEV 2026-09-08TI-2019-00798 Microsoft SQL Server Remote Code Execution Vulnerability Priority CRITICAL 97KEV 2026-08-26

Components

Products in the NVD configurations · select one to filter the records
Windows Server 2019 6456 records CRITICAL Windows Server 2016 6401 records CRITICAL Windows Server 2012 5294 records CRITICAL Windows Server 2022 4946 records CRITICAL Windows 10 1809 4017 records CRITICAL Windows 10 21h2 3968 records CRITICAL Windows 10 22h2 3967 records CRITICAL Windows Server 2025 3632 records CRITICAL

Records

21 records in Windows Admin Center · all components

TI-2026-21113 CVE-2026-26119 · GHSA-w5xc-rm8g-jf7m

Windows Admin Center Elevation of Privilege Vulnerability

Priority MEDIUM 53

Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.11329 Published 2026-02-17 Fixed in 2.6.4 CWE-287
TI-2026-44936 CVE-2026-62873 · GHSA-c89r-fxpx-x3w6

Microsoft 365 Admin Center Elevation of Privilege Vulnerability

Priority MEDIUM 50

Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevate privileges over a network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00606 Published 2026-08-06 No fix listed CWE-347
TI-2026-40570 CVE-2026-56197 · GHSA-x23w-f7cc-jghm

Windows Admin Center (WAC) Remote Code Execution Vulnerability

Priority MEDIUM 42

Improper neutralization of special elements used in a command ('command injection') in Windows Admin Center allows an authorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00987 Published 2026-07-14 Fixed in 2.7.4 CWE-77
TI-2026-40543 CVE-2026-56169 · GHSA-4f65-rfw9-ph2g

Windows Admin Center Elevation of Privilege Vulnerability

Priority MEDIUM 41

Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00747 Published 2026-07-14 Fixed in 2.7.4 CWE-287
TI-2023-13739 CVE-2023-29347 · GHSA-c43w-mg43-xjxr

Windows Admin Center Spoofing Vulnerability

Priority MEDIUM 41

Windows Admin Center Spoofing Vulnerability

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.0188 Published 2023-07-11 Fixed in 2306 CWE-79
TI-2026-27569 CVE-2026-35438 · GHSA-fpxw-597q-27v2

Windows Admin Center Elevation of Privilege Vulnerability

Priority LOW 39

Missing authorization in Windows Admin Center allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.3 Network Low privileges No interaction EPSS 0.00558 Published 2026-05-12 Fixed in 2.6.5.16 CWE-862
TI-2025-40025 CVE-2025-64669 · GHSA-86v4-5hv3-jff7

Windows Admin Center Elevation of Privilege Vulnerability

Priority LOW 37

Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00473 Published 2025-12-11 Fixed in 2.6.5.16 CWE-284
TI-2026-41094 CVE-2026-57107 · GHSA-5q4r-rxfm-x9hm

Windows Admin Center Elevation of Privilege Vulnerability

Priority LOW 36

Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00298 Published 2026-07-14 Fixed in 2.7.4 CWE-287
TI-2026-16983 CVE-2026-20965 · GHSA-r498-r54r-pxqh

Windows Admin Center Elevation of Privilege Vulnerability

Priority LOW 34

Improper verification of cryptographic signature in Windows Admin Center allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.5 Local High privileges No interaction EPSS 0.00231 Published 2026-01-13 Fixed in 0.70.0.0 CWE-347
TI-2026-40558 CVE-2026-56185 · GHSA-rgqw-chxv-cccq

Windows Admin Center Information Disclosure Vulnerability

Priority LOW 30

Improper authentication in Windows Admin Center allows an authorized attacker to disclose information over a network.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0084 Published 2026-07-14 Fixed in 2.6.5.16 CWE-287
TI-2026-42211 CVE-2026-58643 · GHSA-279f-474x-phh7

Windows Admin Center Spoofing Vulnerability

Priority LOW 27

Improper neutralization of input during web page generation ('cross-site scripting') in Windows Admin Center allows an unauthorized attacker to perform spoofing over a network.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00413 Published 2026-07-16 Fixed in 2.6.7 CWE-79
TI-2026-24728 CVE-2026-32196 · GHSA-fjm5-xhfc-2828

Windows Admin Center Spoofing Vulnerability

Priority LOW 27

Improper neutralization of input during web page generation ('cross-site scripting') in Windows Admin Center allows an unauthorized attacker to perform spoofing over a network.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00293 Published 2026-04-14 Fixed in 2.6.5.16 CWE-79
Open these records in search →