Vulnerabilities of Microsoft Windows Admin Center
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-56171 | Exposure of private personal information to an unauthorized actor in Windows RDP allows an unauthorized attacker to… | 7.1 High | Jul 17, 2026 |
| CVE-2026-58643 | Improper neutralization of input during web page generation ('cross-site scripting') in Windows Admin Center allows an… | 6.1 Medium | Jul 16, 2026 |
| CVE-2026-56197 | Improper neutralization of special elements used in a command ('command injection') in Windows Admin Center allows an… | 8.8 High | Jul 14, 2026 |
| CVE-2026-56196 | Relative path traversal in Windows Admin Center allows an authorized attacker to execute code over a network | 8.8 High | Jul 14, 2026 |
| CVE-2026-58631 | Improper authorization in Windows Admin Center allows an authorized attacker to execute code locally | 7.8 High | Jul 14, 2026 |
| CVE-2026-57107 | Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges locally | 7.8 High | Jul 14, 2026 |
| CVE-2026-56185 | Improper authentication in Windows Admin Center allows an authorized attacker to disclose information over a network | 6.5 Medium | Jul 14, 2026 |
| CVE-2026-56169 | Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network | 8.1 High | Jul 14, 2026 |
| CVE-2026-35438 | Missing authorization in Windows Admin Center allows an authorized attacker to elevate privileges over a network | 8.3 High | May 12, 2026 |
| CVE-2026-32196 | Improper neutralization of input during web page generation ('cross-site scripting') in Windows Admin Center allows an… | 6.1 Medium | Apr 14, 2026 |
| CVE-2026-26119 | Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network | 8.8 High | Feb 17, 2026 |
| CVE-2025-64669 | Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges locally | 7.8 High | Dec 11, 2025 |
| CVE-2025-29819 | External control of file name or path in Azure Portal Windows Admin Center allows an unauthorized attacker to disclose… | 6.2 Medium | Apr 8, 2025 |
| CVE-2023-29347 | Windows Admin Center Spoofing Vulnerability | 8.7 High | Jul 11, 2023 |
| CVE-2021-27066 | Windows Admin Center Security Feature Bypass Vulnerability | 4.3 Medium | Mar 11, 2021 |
| CVE-2019-0813 | An elevation of privilege vulnerability exists when Windows Admin Center improperly impersonates operations in certain… | Not rated | Apr 9, 2019 |
Other Microsoft products
Windows Server 2019 5745
Windows Server 2019 (Server Core installation) 5648
Windows 10 Version 1809 5349
Windows Server 2022 5112
Windows Server 2016 5051
Windows Server 2016 (Server Core installation) 4847
Windows 10 Version 21H2 4539
Windows 10 Version 1607 4535
Windows Server 2012 R2 4103
Windows 10 Version 22H2 4041
Windows Server 2012 R2 (Server Core installation) 3958
Windows Server 2012 3865