High · 7.8 CVE-2026-57107 EUVD-2026-43759GHSA-5q4r-rxfm-x9hm

Windows Admin Center Elevation of Privilege Vulnerability

Published Jul 14, 2026 · Updated Nov 10, 2026 · Assigned by microsoft

Vendor: Microsoft Product: Windows Admin Center Platform: Windows

Description

Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges locally.

Affected products

Vendor	Product	Affected	Fixed
Microsoft	Windows Admin Center	1809.0 – < 2.7.4	2.7.4

Advisories 3

WID-SEC-2026-2316 Microsoft Windows Produkte: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 6, 2026
NCSC-2026-0231 Kwetsbaarheden verholpen in Microsoft Windows NCSC-NL (Netherlands) · Jul 14, 2026
MSRC-CVE-2026-57107 Windows Admin Center Elevation of Privilege Vulnerability Microsoft Security Response Center · Jul 14, 2026

References

Windows Admin Center Elevation of Privilege Vulnerability vendor-advisory patch