Microsoft: >> Windows Admin Center >> 2.6.4 Security Vulnerabilities
Exposure of private personal information to an unauthorized actor in Windows RDP allows an unauthorized attacker to disclose information over a network.
CVSS Score
7.1
EPSS Score
0.005
Published
2026-07-17
Relative path traversal in Windows Admin Center allows an authorized attacker to execute code over a network.
CVSS Score
8.8
EPSS Score
0.01
Published
2026-07-14
Improper neutralization of special elements used in a command ('command injection') in Windows Admin Center allows an authorized attacker to execute code over a network.
CVSS Score
8.8
EPSS Score
0.009
Published
2026-07-14
Improper authorization in Windows Admin Center allows an authorized attacker to execute code locally.
CVSS Score
7.8
EPSS Score
0.003
Published
2026-07-14
Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network.
CVSS Score
8.8
EPSS Score
0.004
Published
2026-05-12
Missing authorization in Windows Admin Center allows an authorized attacker to elevate privileges over a network.
CVSS Score
8.3
EPSS Score
0.006
Published
2026-05-12
Improper neutralization of input during web page generation ('cross-site scripting') in Windows Admin Center allows an unauthorized attacker to perform spoofing over a network.
CVSS Score
6.1
EPSS Score
0.003
Published
2026-04-14
Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network.
CVSS Score
8.8
EPSS Score
0.008
Published
2026-02-17
Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges locally.
CVSS Score
7.8
EPSS Score
0.005
Published
2025-12-11
External control of file name or path in Azure Portal Windows Admin Center allows an unauthorized attacker to disclose information locally.
CVSS Score
6.2
EPSS Score
0.01
Published
2025-04-08
Page 1