Microsoft: >> Windows Admin Center Security Vulnerabilities
Exposure of private personal information to an unauthorized actor in Windows RDP allows an unauthorized attacker to disclose information over a network.
CVSS Score
7.1
EPSS Score
0.005
Published
2026-07-17
Improper neutralization of input during web page generation ('cross-site scripting') in Windows Admin Center allows an unauthorized attacker to perform spoofing over a network.
CVSS Score
6.1
EPSS Score
0.002
Published
2026-07-16
Relative path traversal in Windows Admin Center allows an authorized attacker to execute code over a network.
CVSS Score
8.8
EPSS Score
0.01
Published
2026-07-14
Improper neutralization of special elements used in a command ('command injection') in Windows Admin Center allows an authorized attacker to execute code over a network.
CVSS Score
8.8
EPSS Score
0.009
Published
2026-07-14
Improper authorization in Windows Admin Center allows an authorized attacker to execute code locally.
CVSS Score
7.8
EPSS Score
0.003
Published
2026-07-14
Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network.
CVSS Score
8.1
EPSS Score
0.005
Published
2026-07-14
Improper authentication in Windows Admin Center allows an authorized attacker to disclose information over a network.
CVSS Score
6.5
EPSS Score
0.006
Published
2026-07-14
Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges locally.
CVSS Score
7.8
EPSS Score
0.002
Published
2026-07-14
Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network.
CVSS Score
7.8
EPSS Score
0.004
Published
2026-05-20
Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network.
CVSS Score
8.8
EPSS Score
0.004
Published
2026-05-12
Page 1