CVE-2026-20965: Microsoft Windows Admin Center

High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Improper verification of cryptographic signature in Windows Admin Center allows an authorized attacker to elevate privileges locally.

Affected products

• Microsoft Windows Admin Center: before 0.70.0.0 (fixed in 0.70.0.0)

Published 2026-01-13. Last modified 2026-06-17.