7.5
High
CVE-2026-20965 Improper verification of cryptographic signature in Windows Admin Center allows an authorized attacker to elevate…
Description
Improper verification of cryptographic signature in Windows Admin Center allows an authorized attacker to elevate privileges locally.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Windows Admin Center in Azure Portal 0.70 | earliest → < 0.70.0.0 | 0.70.0.0 |
References
- Windows Admin Center Elevation of Privilege Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Windows Admin Center in Azure Portal
The 5 CVEs of Windows Admin Center in Azure Portal →
CVE-2026-42834
Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network
7.8
High
CVE-2026-41086
Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network
8.8
High
CVE-2026-23660
Improper access control in Azure Portal Windows Admin Center allows an authorized attacker to elevate privileges locally
7.8
High
CVE-2025-29819
External control of file name or path in Azure Portal Windows Admin Center allows an unauthorized attacker to disclose…
6.2
Medium