CVE-2026-56171HIGH 7.5Exposure of private personal information to an unauthorized actor in Windows RDP allows an unauthorized attacker to disclose information ove…
CVE-2026-58643MEDIUM 6.1Improper neutralization of input during web page generation ('cross-site scripting') in Windows Admin Center allows an unauthorized attacker…
CVE-2026-56197HIGH 8.8Improper neutralization of special elements used in a command ('command injection') in Windows Admin Center allows an authorized attacker to…
CVE-2026-56196HIGH 8.8Relative path traversal in Windows Admin Center allows an authorized attacker to execute code over a network.
CVE-2026-58631HIGH 7.8Improper authorization in Windows Admin Center allows an authorized attacker to execute code locally.