CVE-20XX-?

Microsoft Windows Admin Center CVEs.

Published CVEs affecting Microsoft Windows Admin Center, ranked by exploit odds.

17 CVEs · updated 2026-11-06 03:33 UTC

  1. CVE-2026-26119

    Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network.

    Auth & access OS & kernel Microsoft Windows Admin Center

    8.8 HIGH 11% exploit odds Fix listed
  2. CVE-2025-29819

    External control of file name or path in Azure Portal Windows Admin Center allows an unauthorized attacker to disclose information locally.

    Microsoft Windows Admin Center

    6.2 MEDIUM 1% exploit odds Fix listed
  3. CVE-2026-56196

    Relative path traversal in Windows Admin Center allows an authorized attacker to execute code over a network.

    Disclosure OS & kernel Microsoft Windows Admin Center

    8.8 HIGH 1% exploit odds Fix listed
  4. CVE-2026-56197

    Improper neutralization of special elements used in a command ('command injection') in Windows Admin Center allows an authorized attacker to execute code over a network.

    Injection OS & kernel Microsoft Windows Admin Center

    8.8 HIGH 1.0% exploit odds Fix listed
  5. CVE-2026-56185

    Improper authentication in Windows Admin Center allows an authorized attacker to disclose information over a network.

    Injection OS & kernel Microsoft Windows Admin Center

    6.5 MEDIUM 0.8% exploit odds Fix listed
  6. CVE-2026-56169

    Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network.

    Auth & access OS & kernel Microsoft Windows Admin Center

    8.1 HIGH 0.7% exploit odds Fix listed
  7. CVE-2026-62873

    Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevate privileges over a network.

    Crypto OS & kernel Microsoft Windows Admin Center

    9.8 CRITICAL 0.6% exploit odds Fix listed
  8. CVE-2026-35438

    Missing authorization in Windows Admin Center allows an authorized attacker to elevate privileges over a network.

    Auth & access OS & kernel Microsoft Windows Admin Center

    8.3 HIGH 0.6% exploit odds Fix listed
  9. CVE-2025-64669

    Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges locally.

    Auth & access OS & kernel Microsoft Windows Admin Center

    7.8 HIGH 0.5% exploit odds Fix listed
  10. CVE-2026-41086

    Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network.

    Auth & access OS & kernel Microsoft Windows Admin Center

    8.8 HIGH 0.4% exploit odds Fix listed
  11. CVE-2026-58643

    Improper neutralization of input during web page generation ('cross-site scripting') in Windows Admin Center allows an unauthorized attacker to perform spoofing over a network.

    XSS OS & kernel Microsoft Windows Admin Center

    6.1 MEDIUM 0.4% exploit odds Fix listed
  12. CVE-2026-42834

    Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network.

    Other OS & kernel Microsoft Windows Admin Center

    7.8 HIGH 0.4% exploit odds Fix listed
  13. CVE-2026-23660

    Improper access control in Azure Portal Windows Admin Center allows an authorized attacker to elevate privileges locally.

    Auth & access OS & kernel Microsoft Windows Admin Center

    7.8 HIGH 0.3% exploit odds Fix listed
  14. CVE-2026-57107

    Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges locally.

    Auth & access OS & kernel Microsoft Windows Admin Center

    7.8 HIGH 0.3% exploit odds Fix listed
  15. CVE-2026-58631

    Improper authorization in Windows Admin Center allows an authorized attacker to execute code locally.

    Other OS & kernel Microsoft Windows Admin Center

    7.8 HIGH 0.3% exploit odds Fix listed
  16. CVE-2026-32196

    Improper neutralization of input during web page generation ('cross-site scripting') in Windows Admin Center allows an unauthorized attacker to perform spoofing over a network.

    XSS Web app Microsoft Windows Admin Center

    6.1 MEDIUM 0.3% exploit odds Fix listed
  17. CVE-2026-20965

    Improper verification of cryptographic signature in Windows Admin Center allows an authorized attacker to elevate privileges locally.

    Crypto OS & kernel Microsoft Windows Admin Center

    7.5 HIGH 0.2% exploit odds Fix listed

All CVEs affecting Microsoft Windows Admin Center that appear in CVE.org and NVD, sorted by how likely they are to be exploited (EPSS), with fix status and timeline.