Priority MEDIUM 50
Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevate privileges over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00606 · Published 2026-08-06 · No fix listed CWE-347
Priority LOW 34
Exposure of private personal information to an unauthorized actor in Windows RDP allows an unauthorized attacker to disclose information over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0066 · Published 2026-07-17 · Fixed in 2.1.65.2, 2.7.4 CWE-359
Priority LOW 27
Improper neutralization of input during web page generation ('cross-site scripting') in Windows Admin Center allows an unauthorized attacker to perform spoofing over a network.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00413 · Published 2026-07-16 · Fixed in 2.6.7 CWE-79
Priority MEDIUM 42
Improper neutralization of special elements used in a command ('command injection') in Windows Admin Center allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00987 · Published 2026-07-14 · Fixed in 2.7.4 CWE-77
Priority MEDIUM 42
Relative path traversal in Windows Admin Center allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01024 · Published 2026-07-14 · Fixed in 2.7.4 CWE-23
Priority LOW 36
Improper authorization in Windows Admin Center allows an authorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00298 · Published 2026-07-14 · Fixed in 2.7.4 CWE-285
Priority LOW 36
Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00298 · Published 2026-07-14 · Fixed in 2.7.4 CWE-287
Priority LOW 30
Improper authentication in Windows Admin Center allows an authorized attacker to disclose information over a network.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.0084 · Published 2026-07-14 · Fixed in 2.6.5.16 CWE-287
Priority MEDIUM 41
Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00747 · Published 2026-07-14 · Fixed in 2.7.4 CWE-287
Priority LOW 36
Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00408 · Published 2026-05-20 · Fixed in 0.72.0.0. CWE-59
Priority MEDIUM 40
Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00427 · Published 2026-05-12 · Fixed in 0.76.0.0 CWE-284
Priority LOW 39
Missing authorization in Windows Admin Center allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.3· Network · Low privileges · No interaction · EPSS 0.00558 · Published 2026-05-12 · Fixed in 2.6.5.16 CWE-862
Priority LOW 27
Improper neutralization of input during web page generation ('cross-site scripting') in Windows Admin Center allows an unauthorized attacker to perform spoofing over a network.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00293 · Published 2026-04-14 · Fixed in 2.6.5.16 CWE-79
Priority LOW 36
Improper access control in Azure Portal Windows Admin Center allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00349 · Published 2026-03-10 · Fixed in 2.6.4 CWE-284
Priority MEDIUM 53
Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.11225 · Published 2026-02-17 · Fixed in 2.6.4 CWE-287
Priority LOW 34
Improper verification of cryptographic signature in Windows Admin Center allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.5· Local · High privileges · No interaction · EPSS 0.00231 · Published 2026-01-13 · Fixed in 0.70.0.0 CWE-347
Priority LOW 37
Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00473 · Published 2025-12-11 · Fixed in 2.6.5.16 CWE-284
Priority LOW 30
External control of file name or path in Azure Portal Windows Admin Center allows an unauthorized attacker to disclose information locally.
CVSS 3.1MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.01071 · Published 2025-04-08 · Fixed in 2.4.2.1, 0.45.0.0 CWE-73
Priority MEDIUM 41
Windows Admin Center Spoofing Vulnerability
CVSS 3.1HIGH 8.7· Network · Low privileges · User interaction · EPSS 0.0188 · Published 2023-07-11 · Fixed in 2306 CWE-79
Priority LOW 26
Windows Admin Center Security Feature Bypass Vulnerability
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.03038 · Published 2021-03-11 · Fixed in publication
Priority MEDIUM 48
An elevation of privilege vulnerability exists when Windows Admin Center improperly impersonates operations in certain situations, aka 'Windows Admin Center Elevation of Privilege Vulnerability'.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03537 · Published 2019-04-09 · No fix listed
THREATIST.IORead the docs