Windows Admin Center CVE-2026-23660

Privilege elevation in Microsoft 365 Admin Center allows a remote, unauthenticated attacker to gain elevated permissions

Remote code execution in Microsoft Windows Admin Center allows an authenticated attacker to run arbitrary code over the

Authenticated remote code execution in Microsoft Windows Admin Center (CWE-77) lets an attacker with low-privilege acces

Privilege elevation in Microsoft Windows Admin Center (versions 1809.0 through 2.7.3) lets an already-authenticated, low

An elevation of privilege vulnerability exists when Windows Admin Center improperly impersonates operations in certain s

Local privilege-to-code-execution in Microsoft Windows Admin Center lets an already-authenticated, lower-privileged user

Local privilege escalation in Microsoft Windows Admin Center allows an already-authenticated, low-privileged attacker to

Windows Admin Center's authentication mechanism can be bypassed by authenticated network users to gain elevated privileg

Privilege escalation in Microsoft Windows Admin Center (versions 1809.0 before 2.6.5.16) allows an already-authenticated

Improper authentication in Windows Admin Center (versions prior to 2.6.5.16) enables an authenticated low-privilege atta

Information disclosure in Microsoft Remote Desktop Web Client (before 2.1.65.2) and Windows Admin Center (before 2.7.4)

Windows Admin Center fails to properly validate cryptographic signatures, enabling high-privileged users to bypass secur