Microsoft Windows Admin Center vulnerabilities

21 CVEs affecting Microsoft Windows Admin Center, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-62873, published 2026-08-07.

More from Microsoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-0813, published 2019-04-09. Critical severity, CVSS 9.8. EPSS: 3.5% chance of exploitation in the next 30 days. An elevation of privilege vulnerability exists when Windows Admin Center improperly impersonates operations in certain situations, aka 'Windows Admin Center Elevation of Privilege Vulnerability'.
• CVE-2021-27066, published 2021-03-11. Medium severity, CVSS 4.3. EPSS: 3% chance of exploitation in the next 30 days. Windows Admin Center Security Feature Bypass Vulnerability
• CVE-2023-29347, published 2023-07-11. Medium severity, CVSS 6.8. EPSS: 1.9% chance of exploitation in the next 30 days. Windows Admin Center Spoofing Vulnerability
• CVE-2025-29819, published 2025-04-08. Medium severity, CVSS 6.2. EPSS: 1.1% chance of exploitation in the next 30 days. External control of file name or path in Azure Portal Windows Admin Center allows an unauthorized attacker to disclose information locally.
• CVE-2026-56196, published 2026-07-14. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. Relative path traversal in Windows Admin Center allows an authorized attacker to execute code over a network.
• CVE-2026-56197, published 2026-07-14. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. Improper neutralization of special elements used in a command ('command injection') in Windows Admin Center allows an authorized attacker to execute code over a network.
• CVE-2026-26119, published 2026-02-17. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network.
• CVE-2026-56185, published 2026-07-14. Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days. Improper authentication in Windows Admin Center allows an authorized attacker to disclose information over a network.
• CVE-2026-41086, published 2026-05-12. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network.
• CVE-2026-56169, published 2026-07-14. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network.

Latest

• CVE-2026-62873, published 2026-08-07. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevate privileges over a network.
• CVE-2026-56171, published 2026-07-17. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. Exposure of private personal information to an unauthorized actor in Windows RDP allows an unauthorized attacker to disclose information over a network.
• CVE-2026-58643, published 2026-07-16. Medium severity, CVSS 6.1. EPSS: 0.4% chance of exploitation in the next 30 days. Improper neutralization of input during web page generation ('cross-site scripting') in Windows Admin Center allows an unauthorized attacker to perform spoofing over a network.
• CVE-2026-58631, published 2026-07-14. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Improper authorization in Windows Admin Center allows an authorized attacker to execute code locally.
• CVE-2026-57107, published 2026-07-14. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges locally.
• CVE-2026-42834, published 2026-05-20. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network.