269 matches found
Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability
Improper access control in Azure Portal Windows Admin Center allows an authorized attacker to elevate privileges locally...
KLA90924 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to spoof user interface, bypass security restrictions, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A spoofing vulnerability in Azure IOT...
PT-2026-24266
Name of the Vulnerable Software and Affected Versions Microsoft Windows Admin Center affected versions not specified Description An improper access control issue exists in the Azure Portal Windows Admin Center. This allows an authorized attacker to elevate privileges locally. Recommendations At t...
Microsoft Windows Admin Center Authorization Issues Vulnerability
Microsoft Windows Admin Center is a locally deployed browser-based application from Microsoft USA. The program is mainly used for managing servers, clusters, etc. An authorization issue vulnerability exists in Microsoft Windows Admin Center that stems from improper authentication and can be...
Microsoft Patches CVE-2026-26119 Privilege Escalation in Windows Admin Center
Microsoft has disclosed a now-patched security flaw in Windows Admin Center that could allow an attacker to escalate their privileges. Windows Admin Center is a locally deployed, browser-based management tool set that lets users manage their Windows Clients, Servers, and Clusters without the need...
CVE-2026-26119
Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network...
CVE-2026-26119
Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network...
CVE-2026-26119
Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network...
CVE-2026-26119 Windows Admin Center Elevation of Privilege Vulnerability
...
CVE-2026-26119
Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network...
CVE-2026-26119 Windows Admin Center Elevation of Privilege Vulnerability
...
CVE-2026-26119
CVE-2026-26119 describes an elevation-of-privilege issue in Windows Admin Center due to improper authentication. The vulnerability enables an authorized attacker to elevate privileges over the network with network access, low attack complexity, and no user interaction required. The impact is rate...
Windows Admin Center Elevation of Privilege Vulnerability
Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network...
Microsoft Windows Admin Center 授权问题漏洞
Microsoft Windows Admin Center is a locally deployed browser-based application from Microsoft USA. The program is mainly used for managing servers, clusters, etc. An authorization issue vulnerability exists in Microsoft Windows Admin Center that stems from improper authentication and can be...
PT-2026-20332
Name of the Vulnerable Software and Affected Versions Windows Admin Center versions prior to 2511 Description An improper authentication issue exists in Windows Admin Center, potentially allowing an authorized attacker to elevate privileges on a network. The vulnerability, identified as...
PT-2026-3085
Name of the Vulnerable Software and Affected Versions Agentflow versions affected versions not specified Windows Admin Center versions affected versions not specified Description Agentflow, developed by Flowring, exhibits a Missing Authentication issue. This allows unauthenticated remote attacker...
CVE-2026-20965
Improper verification of cryptographic signature in Windows Admin Center allows an authorized attacker to elevate privileges locally...
Vulnerabilities fixed in Microsoft Azure
Microsoft has fixed vulnerabilities in several Azure components. A malicious party can exploit the vulnerabilities to grant themselves elevated privileges to access sensitive data or execute code that the malicious party is not initially authorized to execute. For successful abuse, the malicious...