High · 8.0 CVE-2026-122988 EUVD-2026-122311GHSA-wh6f-vhpg-8gf9

Windows Admin Center Elevation of Privilege Vulnerability

Published Nov 10, 2026 · Updated Nov 13, 2026 · Assigned by microsoft

Vendor: Microsoft Product: Windows Admin Center Platform: Windows

Description

Improper authorization in Windows Admin Center allows an authorized attacker to elevate privileges over a network.

Affected products

Vendor	Product	Affected	Fixed
Microsoft	Windows Admin Center	1809.0 – < 2.1.36	2.1.36

Advisories 2

WID-SEC-2026-4478 Microsoft Windows: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 10, 2026
MSRC-CVE-2026-122988 Windows Admin Center Elevation of Privilege Vulnerability Microsoft Security Response Center · Nov 10, 2026

References

Windows Admin Center Elevation of Privilege Vulnerability vendor-advisory patch