CVE-2025-47179

MEDIUM 6.7CVE-2025-47179 · Published 11/11/2025 · updated 18/10/2026

In short

CVE-2025-47179 is a MEDIUM (CVSS 6.7) vulnerability affecting configuration manager 2403 (microsoft), configuration manager 2409 (microsoft), configuration manager 2503 (microsoft).
Chance of exploitation in the next 30 days (EPSS): 0.37%, higher than 31.4% of all vulnerabilities.
Fix: update to 5.00.9128.1037, 5.00.9132.1031, 5.0.9135.1013 or later.

Package	Affected versions	Patched versions
configuration manager 2403 microsoft	`< 5.00.9128.1037`	`5.00.9128.1037`
configuration manager 2409 microsoft	`< 5.00.9132.1031`	`5.00.9132.1031`
configuration manager 2503 microsoft	`< 5.0.9135.1013`	`5.0.9135.1013`

Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges locally.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.