Skip to content
OpenAdvisories
High MSRC-CVE-2026-42834 1 CVE

Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability

Published May 19, 2026 · Updated May 19, 2026

Vendor: Microsoft

Summary

Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

What privileges could be gained by an attacker who successfully exploited this vulnerability?
An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.

What customer action needs to take place to mitigate the vulnerability?
Customers should install the latest version of the Windows Admin Center extension through the Azure Portal. There is no direct download link; instead, customers need to open the Extensions + Applications blade for their virtual machine in the Azure Portal and search for the extension named AdminCenter (Microsoft.AdminCenter.AdminCenter). From there, they can add or update the extension following the standard Azure VM extension installation process described here.

Security updates
0.72.0.0. — https://learn.microsoft.com/en-us/windows-server/manage/windows-admin-center/azure/extension-release-notes

Vulnerabilities 1

Revision history

  1. #1

    Information published. This CVE was addressed by updates that were released in May 2026, but the CVE was inadvertently omitted from the May 2026 Security Updates. This is an informational change only. Customers who have already installed the May 2026 updates do not need to take any further action.

References