Microsoft Windows Admin Center Information Disclosure (April 2025)

The remote Windows host is running a version of Microsoft Windows Admin Center that is missing a security update. It is, therefore, affected by an information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2025-29819 Note that Nessus has...

Vulnerabilities fixed in Microsoft Azure

Microsoft has fixed vulnerabilities in several Azure products. A malicious person could exploit the vulnerabilities to grant themselves elevated privileges and gain access to sensitive data. The vulnerability with reference CVE-2025-27489 allows the malicious party, by loading a non-Microsoft DLL...

CVE-2025-29819

External control of file name or path in Azure Portal Windows Admin Center allows an unauthorized attacker to disclose information locally...

CVE-2025-29819

External control of file name or path in Azure Portal Windows Admin Center allows an unauthorized attacker to disclose information locally...

CVE-2025-29819 Windows Admin Center in Azure Portal Information Disclosure Vulnerability

...

CVE-2025-29819 Windows Admin Center in Azure Portal Information Disclosure Vulnerability

...

Windows Admin Center in Azure Portal Information Disclosure Vulnerability

External control of file name or path in Azure Portal Windows Admin Center allows an unauthorized attacker to disclose information locally...

CVE-2025-29819: External Control of File Name or Path

External control of file name or path in Azure Portal Windows Admin Center allows an unauthorized attacker to disclose information locally...

PT-2025-15591 · Microsoft · Azure Portal Windows Admin Center

Name of the Vulnerable Software and Affected Versions: Azure Portal Windows Admin Center affected versions not specified Description: The issue allows an unauthorized attacker to disclose information locally due to external control of file name or path in Azure Portal Windows Admin Center...

Microsoft Azure security vulnerabilities

Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from Microsoft USA. A security vulnerability exists in Microsoft Azure. An attacker exploiting this vulnerability could gain access to sensitive information. The following products and versions are affected: Windows...

KLA82407 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, gain privileges. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in Azure Local Cluster...

CVE-2024-42012: Insufficiently Protected Credentials

GRAU DATA Blocky before 3.1 stores passwords encrypted rather than hashed. At the login screen, the user's password is compared to the user's decrypted cleartext password. An attacker with Windows admin or debugging rights can therefore steal the user's Blocky password and from there impersonate...

CVE-2024-42012

GRAU DATA Blocky versions prior to 3.1 contain a vulnerability where passwords are stored in an encrypted format rather than being hashed. During the login process, the software compares the provided password against the decrypted cleartext password . This flaw allows an attacker with Windows adm...

PT-2025-2616

Name of the Vulnerable Software and Affected Versions GRAU DATA Blocky versions prior to 3.1 Description The issue arises because GRAU DATA Blocky stores passwords encrypted rather than hashed. When a user logs in, their password is compared to the decrypted cleartext password. This allows an...

CVE-2024-43475

CVE-2024-43475 is a Microsoft Windows Admin Center information-disclosure vulnerability. Connected sources describe a memory-corruption issue (buffer overflow) affecting Windows Admin Center-related functionality that can lead to sensitive data disclosure. CVSS details from the initial document i...

EUVD-2024-40742

Microsoft Windows Admin Center Information Disclosure Vulnerability...

Microsoft Windows Admin Center Information Disclosure Vulnerability

...

CVE-2024-43475: Buffer Over-read

Microsoft Windows Admin Center Information Disclosure Vulnerability...

PT-2024-6306 · Microsoft · Windows Admin Center +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Admin Center affected versions not specified Description: The issue is related to a buffer overflow in memory, allowing an attacker to disclose protected information or cause a denial of service. There is no information abou...

Microsoft Windows Admin Center security vulnerabilities

Microsoft Windows Admin Center is a locally deployed browser-based application from Microsoft USA. The program is primarily used to manage servers, clusters, and more. A security vulnerability exists in Microsoft Windows Admin Center. An attacker could exploit the vulnerability to obtain sensitiv...