Home
Description
Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.
PUBLISHED Reserved 2025-02-12 | Published 2025-03-11 | Updated 2025-07-30 | Assigner microsoft
HIGH: 7.0CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
CISA Known Exploited Vulnerability
Date added 2025-03-11 | Due date 2025-04-01
Known Ransomware Campaign(s)
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Problem types
CWE-707: Improper Neutralization
Product status
10.0.17763.0 before 10.0.17763.7009
affected
10.0.17763.0 before 10.0.17763.7009
affected
10.0.17763.0 before 10.0.17763.7009
affected
10.0.20348.0 before 10.0.20348.3328
affected
10.0.19044.0 before 10.0.19044.5608
affected
10.0.22621.0 before 10.0.22621.5039
affected
10.0.19045.0 before 10.0.19045.5608
affected
10.0.26100.0 before 10.0.26100.3476
affected
10.0.22631.0 before 10.0.22631.5039
affected
10.0.22631.0 before 10.0.22631.5039
affected
10.0.25398.0 before 10.0.25398.1486
affected
10.0.26100.0 before 10.0.26100.3476
affected
10.0.26100.0 before 10.0.26100.3476
affected
10.0.10240.0 before 10.0.10240.20947
affected
10.0.14393.0 before 10.0.14393.7876
affected
10.0.14393.0 before 10.0.14393.7876
affected
10.0.14393.0 before 10.0.14393.7876
affected
6.0.6003.0 before 6.0.6003.23168
affected
6.0.6003.0 before 6.0.6003.23168
affected
6.0.6003.0 before 6.0.6003.23168
affected
6.1.7601.0 before 6.1.7601.27618
affected
6.1.7601.0 before 6.1.7601.27618
affected
6.2.9200.0 before 6.2.9200.25368
affected
6.2.9200.0 before 6.2.9200.25368
affected
6.3.9600.0 before 6.3.9600.22470
affected
6.3.9600.0 before 6.3.9600.22470
affected
References
msrc.microsoft.com/update-guide/vulnerability/CVE-2025-26633 (Microsoft Management Console Security Feature Bypass Vulnerability) vendor-advisory
cve.org
(CVE-2025-26633)
nvd.nist.gov
(CVE-2025-26633)
Download JSON
