6.2
Medium
CVE-2025-29819 External control of file name or path in Azure Portal Windows Admin Center allows an unauthorized attacker to disclose…
Description
External control of file name or path in Azure Portal Windows Admin Center allows an unauthorized attacker to disclose information locally.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Windows Admin Center in Azure Portal 0.45 | earliest → < 0.45.0.0 | 0.45.0.0 |
| Windows Admin Center 2.4 | earliest → < 2.4.2.1 | 2.4.2.1 |
References
- Windows Admin Center in Azure Portal Information Disclosure Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Windows Admin Center in Azure Portal
The 5 CVEs of Windows Admin Center in Azure Portal →
CVE-2026-42834
Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network
7.8
High
CVE-2026-41086
Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network
8.8
High
CVE-2026-23660
Improper access control in Azure Portal Windows Admin Center allows an authorized attacker to elevate privileges locally
7.8
High
CVE-2026-20965
Improper verification of cryptographic signature in Windows Admin Center allows an authorized attacker to elevate…
7.5
High