7.8
High
CVE-2025-64669 Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges locally
Description
Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges locally.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Windows Admin Center 2.6 | earliest → < 2.6.5.16 | 2.6.5.16 |
References
- Windows Admin Center Elevation of Privilege Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Windows Admin Center
The 16 CVEs of Windows Admin Center →
CVE-2026-56171
Exposure of private personal information to an unauthorized actor in Windows RDP allows an unauthorized attacker to…
7.1
High
CVE-2026-58643
Improper neutralization of input during web page generation ('cross-site scripting') in Windows Admin Center allows an…
6.1
Medium
CVE-2026-56197
Improper neutralization of special elements used in a command ('command injection') in Windows Admin Center allows an…
8.8
High
CVE-2026-56196
Relative path traversal in Windows Admin Center allows an authorized attacker to execute code over a network
8.8
High