Exploit for Improper Neutralization in Microsoft

🗓️ 22 Nov 2025 10:08:14Reported by mbanyamerType

githubexploit

githubexploit🔗 github.com👁 234 Views

Zero-day MMC EvilTwin exploit enables local privilege escalation via MSC files; patched March 2025.

Reporter	Title	Published	Views	Family All 77
GithubExploit	ndaybench	26 May 202603:04	–	githubexploit
GithubExploit	Exploit for Improper Neutralization in Microsoft	8 Apr 202519:29	–	githubexploit
ATTACKERKB	CVE-2025-26633	11 Mar 202500:00	–	attackerkb
Information Security Automation	April “In the Trend of VM” (#14): vulnerabilities in Microsoft Windows, VMware products, Kubernetes, and Apache Tomcat	22 Apr 202521:16	–	avleonov
Information Security Automation	March Microsoft Patch Tuesday	12 Mar 202509:56	–	avleonov
BDU FSTEC	Vulnerability of Windows operating system control consoles, allowing attackers to circumvent existing security restrictions	12 Mar 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Windows operating system’s task scheduler allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.	14 May 202500:00	–	bdu_fstec
Circl	CVE-2025-26633	11 Mar 202516:39	–	circl
CISA KEV Catalog	Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability	11 Mar 202500:00	–	cisa_kev
CISA	CISA Adds Six Known Exploited Vulnerabilities to Catalog	11 Mar 202512:00	–	cisa

22 Nov 2025 10:09Current

7.4High risk

Vulners AI Score7.4

CVSS 3.17

EPSS0.31894

windows vulnerability local privilege escalation mmc exploit msc file zero day exploit water gamayun