High · 7.8 CVE-2026-23660 EUVD-2026-10581GHSA-g2mf-4fpr-7ccj

Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability

Published Mar 10, 2026 · Updated Jun 19, 2026 · Assigned by microsoft

Vendor: Microsoft Product: Windows Admin Center in Azure Portal Platform: Windows

Description

Improper access control in Azure Portal Windows Admin Center allows an authorized attacker to elevate privileges locally.

Affected products

Vendor	Product	Affected	Fixed
Microsoft	Windows Admin Center in Azure Portal	1.0 – < 2.6.4	2.6.4

Advisories 3

WID-SEC-2026-0655 Microsoft Azure Komponenten: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 10, 2026
NCSC-2026-0082 Kwetsbaarheden verholpen in Microsoft Azure NCSC-NL (Netherlands) · Mar 10, 2026
MSRC-CVE-2026-23660 Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability Microsoft Security Response Center · Mar 10, 2026

References

Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability vendor-advisory patch