Skip to main content

Windows Admin Center CVE-2021-27066

MEDIUM
2021-03-11 secure@microsoft.com
4.3
CVSS 3.1 · Vendor: microsoft
Share

Severity by source

Vendor (microsoft) PRIMARY
4.3 MEDIUM
AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Primary rating from Vendor (microsoft) · only source for this CVE.

CVSS VectorVendor: microsoft

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
None

Lifecycle Timeline

1
CVE Published
Mar 11, 2021 - 16:15 cve.org
MEDIUM 4.3

DescriptionCVE.org

Windows Admin Center Security Feature Bypass Vulnerability

AnalysisAI

Windows Admin Center Security Feature Bypass Vulnerability. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity.

Technical ContextAI

Affected products include: Microsoft Windows Admin Center.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

CVE-2026-56196 HIGH
8.8 Jul 14

Remote code execution in Microsoft Windows Admin Center allows an authenticated attacker to run arbitrary code over the

CVE-2026-56197 HIGH
8.8 Jul 14

Authenticated remote code execution in Microsoft Windows Admin Center (CWE-77) lets an attacker with low-privilege acces

CVE-2019-0813 CRITICAL
9.8 Apr 09

An elevation of privilege vulnerability exists when Windows Admin Center improperly impersonates operations in certain s

CVE-2026-56169 HIGH
8.1 Jul 14

Privilege elevation in Microsoft Windows Admin Center allows an already-authenticated (low-privileged) network attacker

CVE-2026-58631 HIGH
7.8 Jul 14

Local privilege-to-code-execution in Microsoft Windows Admin Center lets an already-authenticated, lower-privileged user

CVE-2026-57107 HIGH
7.8 Jul 14

Local privilege escalation in Microsoft Windows Admin Center allows an already-authenticated, low-privileged attacker to

CVE-2026-26119 HIGH
8.8 Feb 17

Windows Admin Center's authentication mechanism can be bypassed by authenticated network users to gain elevated privileg

CVE-2026-23660 HIGH
7.8 Mar 10

Windows Admin Center in Azure Portal contains an access control flaw that enables local authenticated users to escalate

CVE-2026-56185 MEDIUM
6.5 Jul 14

Improper authentication in Windows Admin Center allows an authorized attacker to disclose information over a network.

CVE-2026-20965 HIGH
7.5 Jan 13

Windows Admin Center fails to properly validate cryptographic signatures, enabling high-privileged users to bypass secur

CVE-2023-29347 MEDIUM
6.8 Jul 11

Windows Admin Center Spoofing Vulnerability. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitabl

CVE-2025-29819 MEDIUM
6.2 Apr 08

External control of file name or path in Azure Portal Windows Admin Center allows an unauthorized attacker to disclose i

Share

CVE-2021-27066 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy