Skip to main content

Windows Admin Center CVE-2025-29819

MEDIUM
External Control of File Name or Path (CWE-73)
2025-04-08 secure@microsoft.com
6.2
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
6.2 MEDIUM
AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

2
Analysis Generated
Mar 28, 2026 - 18:35 vuln.today
CVE Published
Apr 08, 2025 - 18:16 nvd
MEDIUM 6.2

DescriptionCVE.org

External control of file name or path in Azure Portal Windows Admin Center allows an unauthorized attacker to disclose information locally.

AnalysisAI

External control of file name or path in Azure Portal Windows Admin Center allows an unauthorized attacker to disclose information locally. Rated medium severity (CVSS 6.2), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-73. External control of file name or path in Azure Portal Windows Admin Center allows an unauthorized attacker to disclose information locally. Affected products include: Microsoft Windows Admin Center.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

CVE-2026-62873 CRITICAL
9.8 Aug 07

Privilege elevation in Microsoft 365 Admin Center allows a remote, unauthenticated attacker to gain elevated permissions

CVE-2026-56196 HIGH
8.8 Jul 14

Remote code execution in Microsoft Windows Admin Center allows an authenticated attacker to run arbitrary code over the

CVE-2026-56197 HIGH
8.8 Jul 14

Authenticated remote code execution in Microsoft Windows Admin Center (CWE-77) lets an attacker with low-privilege acces

CVE-2026-56169 HIGH
8.8 Jul 14

Privilege elevation in Microsoft Windows Admin Center (versions 1809.0 through 2.7.3) lets an already-authenticated, low

CVE-2019-0813 CRITICAL
9.8 Apr 09

An elevation of privilege vulnerability exists when Windows Admin Center improperly impersonates operations in certain s

CVE-2026-58631 HIGH
7.8 Jul 14

Local privilege-to-code-execution in Microsoft Windows Admin Center lets an already-authenticated, lower-privileged user

CVE-2026-57107 HIGH
7.8 Jul 14

Local privilege escalation in Microsoft Windows Admin Center allows an already-authenticated, low-privileged attacker to

CVE-2026-26119 HIGH
8.8 Feb 17

Windows Admin Center's authentication mechanism can be bypassed by authenticated network users to gain elevated privileg

CVE-2026-35438 HIGH
8.3 May 12

Privilege escalation in Microsoft Windows Admin Center (versions 1809.0 before 2.6.5.16) allows an already-authenticated

CVE-2026-23660 HIGH
7.8 Mar 10

Windows Admin Center in Azure Portal contains an access control flaw that enables local authenticated users to escalate

CVE-2026-56185 MEDIUM
6.5 Jul 14

Improper authentication in Windows Admin Center (versions prior to 2.6.5.16) enables an authenticated low-privilege atta

CVE-2026-56171 HIGH
7.5 Jul 17

Information disclosure in Microsoft Remote Desktop Web Client (before 2.1.65.2) and Windows Admin Center (before 2.7.4)

Share

CVE-2025-29819 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy