Skip to content

Vulnerabilities of Microsoft Windows Admin Center in Azure Portal

Is your version affected?

CVE Summary Score Published
CVE-2026-42834 Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network 7.8 High May 20, 2026
CVE-2026-41086 Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network 8.8 High May 12, 2026
CVE-2026-23660 Improper access control in Azure Portal Windows Admin Center allows an authorized attacker to elevate privileges locally 7.8 High Mar 10, 2026
CVE-2026-20965 Improper verification of cryptographic signature in Windows Admin Center allows an authorized attacker to elevate… 7.5 High Jan 13, 2026
CVE-2025-29819 External control of file name or path in Azure Portal Windows Admin Center allows an unauthorized attacker to disclose… 6.2 Medium Apr 8, 2025

Other Microsoft products