Microsoft Windows Admin Center

16 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2026-561711809.0 – < 2.7.4Windows Remote Desktop Protocol (RDP) Information Disclosure VulnerabilityHIGH 7.50.7 %
CVE-2026-586431809.0 – < 2.6.7Windows Admin Center Spoofing VulnerabilityMEDIUM 6.10.4 %
CVE-2026-561971809.0 – < 2.7.4Windows Admin Center (WAC) Remote Code Execution VulnerabilityHIGH 8.81.0 %
CVE-2026-561961809.0 – < 2.7.4Windows Admin Center (WAC) Remote Code Execution VulnerabilityHIGH 8.81.0 %
CVE-2026-586311809.0 – < 2.7.4Windows Admin Center (WAC) Remote Code Execution VulnerabilityHIGH 7.80.3 %
CVE-2026-571071809.0 – < 2.7.4Windows Admin Center Elevation of Privilege VulnerabilityHIGH 7.80.3 %
CVE-2026-561851809.0 – < 2.6.5.16Windows Admin Center Information Disclosure VulnerabilityMEDIUM 6.50.8 %
CVE-2026-561691809.0 – < 2.7.4Windows Admin Center Elevation of Privilege VulnerabilityHIGH 8.80.7 %
CVE-2026-354381809.0 – < 2.6.5.16Windows Admin Center Elevation of Privilege VulnerabilityHIGH 8.30.6 %
CVE-2026-321961809.0 – < 2.6.5.16Windows Admin Center Spoofing VulnerabilityMEDIUM 6.10.3 %
CVE-2026-261191809.0 – < 2.6.4Windows Admin Center Elevation of Privilege VulnerabilityHIGH 8.811 %
CVE-2025-646691809.0 – < 2.6.5.16Windows Admin Center Elevation of Privilege VulnerabilityHIGH 7.80.5 %
CVE-2025-298191809.0 – < 2.4.2.1Windows Admin Center in Azure Portal Information Disclosure VulnerabilityMEDIUM 6.21.1 %
CVE-2023-293471809.0 – < 2306Windows Admin Center Spoofing VulnerabilityHIGH 8.71.9 %
CVE-2021-270661809.0 – < publicationWindows Admin Center Security Feature Bypass VulnerabilityMEDIUM 4.33.0 %
CVE-2019-0813unspecifiedAn elevation of privilege vulnerability exists when Windows Admin Center improperly impersonates operations in certain situations, aka 'WindCRITICAL 9.83.5 %