The vulnerability of the System Image Manager tool in Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the System Image Manager SIM tool in Windows operating systems is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code...

EUVD-2026-10629

Deserialization of untrusted data in Windows System Image Manager allows an authorized attacker to execute code locally...

CVE-2026-25166

Deserialization of untrusted data in Windows System Image Manager allows an authorized attacker to execute code locally...

CVE-2026-25166 Windows System Image Manager Assessment and Deployment Kit (ADK) Remote Code Execution Vulnerability

...

CVE-2026-25166

CVE-2026-25166 /Windows System Image Manager ADK: A.local, low-privilege, no-user-interaction remote code execution vulnerability with high impact (C/H/I/A) per CVSS 3.1; fix is an official update. Exploitation details are not provided in the document.

CVE-2026-25166

Deserialization of untrusted data in Windows System Image Manager allows an authorized attacker to execute code locally...

March 10, 2026—KB5079466 (OS Build 28000.1719)

None None...

Windows System Image Manager Assessment and Deployment Kit (ADK) Remote Code Execution Vulnerability

Deserialization of untrusted data in Windows System Image Manager allows an authorized attacker to execute code locally...

PT-2026-24293

Deserialization of untrusted data in Windows System Image Manager allows an authorized attacker to execute code locally...

CVE-2026-25166: Deserialization of Untrusted Data

Deserialization of untrusted data in Windows System Image Manager allows an authorized attacker to execute code locally...