7.8
High
CVE-2026-23660 Improper access control in Azure Portal Windows Admin Center allows an authorized attacker to elevate privileges locally
Description
Improper access control in Azure Portal Windows Admin Center allows an authorized attacker to elevate privileges locally.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Windows Admin Center in Azure Portal 1.0 | 1.0 → < 2.6.4 | 2.6.4 |
References
- Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Windows Admin Center in Azure Portal
The 5 CVEs of Windows Admin Center in Azure Portal →
CVE-2026-42834
Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network
7.8
High
CVE-2026-41086
Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network
8.8
High
CVE-2026-20965
Improper verification of cryptographic signature in Windows Admin Center allows an authorized attacker to elevate…
7.5
High
CVE-2025-29819
External control of file name or path in Azure Portal Windows Admin Center allows an unauthorized attacker to disclose…
6.2
Medium