| CVE-2026-56171 | ÉLEVÉE7.5 | Exposure of private personal information to an unauthorized actor in Windows RDP allows an unauthorized attacker to disclose information over a network. | 17/07/2026 |
| CVE-2026-58643 | MOYENNE6.1 | Improper neutralization of input during web page generation ('cross-site scripting') in Windows Admin Center allows an unauthorized attacker to perform spoofing over a network. | 16/07/2026 |
| CVE-2026-56197 | ÉLEVÉE8.8 | Improper neutralization of special elements used in a command ('command injection') in Windows Admin Center allows an authorized attacker to execute code over a network. | 14/07/2026 |
| CVE-2026-56196 | ÉLEVÉE8.8 | Relative path traversal in Windows Admin Center allows an authorized attacker to execute code over a network. | 14/07/2026 |
| CVE-2026-58631 | ÉLEVÉE7.8 | Improper authorization in Windows Admin Center allows an authorized attacker to execute code locally. | 14/07/2026 |
| CVE-2026-57107 | ÉLEVÉE7.8 | Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges locally. | 14/07/2026 |
| CVE-2026-56185 | MOYENNE6.5 | Improper authentication in Windows Admin Center allows an authorized attacker to disclose information over a network. | 14/07/2026 |
| CVE-2026-56169 | ÉLEVÉE8.8 | Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network. | 14/07/2026 |
| CVE-2026-42834 | ÉLEVÉE7.8 | Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network. | 20/05/2026 |
| CVE-2026-41086 | ÉLEVÉE8.8 | Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network. | 12/05/2026 |
| CVE-2026-35438 | ÉLEVÉE8.3 | Missing authorization in Windows Admin Center allows an authorized attacker to elevate privileges over a network. | 12/05/2026 |
| CVE-2026-32196 | MOYENNE6.1 | Improper neutralization of input during web page generation ('cross-site scripting') in Windows Admin Center allows an unauthorized attacker to perform spoofing over a network. | 14/04/2026 |
| CVE-2026-23660 | ÉLEVÉE7.8 | Improper access control in Azure Portal Windows Admin Center allows an authorized attacker to elevate privileges locally. | 10/03/2026 |
| CVE-2026-26119 | ÉLEVÉE8.8 | Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network. | 17/02/2026 |
| CVE-2026-20965 | ÉLEVÉE7.5 | Improper verification of cryptographic signature in Windows Admin Center allows an authorized attacker to elevate privileges locally. | 13/01/2026 |
| CVE-2025-64669 | ÉLEVÉE7.8 | Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges locally. | 11/12/2025 |
| CVE-2025-29819 | MOYENNE6.2 | External control of file name or path in Azure Portal Windows Admin Center allows an unauthorized attacker to disclose information locally. | 08/04/2025 |
| CVE-2023-29347 | MOYENNE6.8 | Windows Admin Center Spoofing Vulnerability | 11/07/2023 |
| CVE-2019-0813 | CRITIQUE9.8 | An elevation of privilege vulnerability exists when Windows Admin Center improperly impersonates operations in certain situations, aka 'Windows Admin Center Elevation of Privilege Vulnerability'. | 09/04/2019 |