Veille CVE

Recherche « Microsoft Windows Admin Center »

15 CVE

Critique 1 Élevée 12 Moyenne 2 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Microsoft Windows Admin Center » ✕
  1. CVE-2026-101207 8.8 Élevée

    Dell OpenManage Integration

    Dell OpenManage Integration with Microsoft Windows Admin Center, versions prior to 3.7.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.

  2. CVE-2026-62873 9.8 Critique

    Microsoft 365 Admin Center · Microsoft windows admin center

    Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevate privileges over a network.

  3. CVE-2026-56171 7.5 Élevée

    Microsoft Remote Desktop Web Client · Microsoft Windows Admin Center

    Exposure of private personal information to an unauthorized actor in Windows RDP allows an unauthorized attacker to disclose information over a network.

  4. CVE-2026-58643 6.1 Moyenne

    Microsoft Windows Admin Center

    Improper neutralization of input during web page generation ('cross-site scripting') in Windows Admin Center allows an unauthorized attacker to perform spoofing over a network.

  5. CVE-2026-14371 8.8 Élevée

    Lenovo XClarity Integrator for Microsoft Windows Admin Center

    The Lenovo XClarity Integrator for Windows Admin Center plugin version 5.1.1 and below running on the WAC Gateway is vulnerable to Powershell Command Injection when establishing remote PowerShell commands.

  6. CVE-2026-56197 8.8 Élevée

    Microsoft Windows Admin Center

    Improper neutralization of special elements used in a command ('command injection') in Windows Admin Center allows an authorized attacker to execute code over a network.

  7. CVE-2026-56196 8.8 Élevée

    Microsoft Windows Admin Center

    Relative path traversal in Windows Admin Center allows an authorized attacker to execute code over a network.

  8. CVE-2026-58631 7.8 Élevée

    Microsoft Windows Admin Center

    Improper authorization in Windows Admin Center allows an authorized attacker to execute code locally.

  9. CVE-2026-57107 7.8 Élevée

    Microsoft Windows Admin Center

    Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges locally.

  10. CVE-2026-56185 6.5 Moyenne

    Microsoft Windows Admin Center

    Improper authentication in Windows Admin Center allows an authorized attacker to disclose information over a network.

  11. CVE-2026-56169 8.8 Élevée

    Microsoft Windows Admin Center

    Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network.

  12. CVE-2024-24909 8.8 Élevée

    Dell OpenManage

    Dell OpenManage Integration with Microsoft Windows Admin Center contains a Remote Code Execution vulnerability in the gateway plugin. A remote authenticated user could potentially exploit this vulnerability to escalate privileges. The malicious user may gain the ability to run arbitrary code remotely. This is a high severity vulnerability so Dell recommends customers to upgrade at the earliest opportunity.

  13. CVE-2026-42834 7.8 Élevée

    Microsoft Windows Admin Center in Azure Portal · Microsoft windows admin center

    Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network.

  14. CVE-2026-41086 8.8 Élevée

    Microsoft Windows Admin Center in Azure Portal · Microsoft windows admin center

    Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network.

  15. CVE-2026-35438 8.3 Élevée

    Microsoft Windows Admin Center

    Missing authorization in Windows Admin Center allows an authorized attacker to elevate privileges over a network.