High · published March 11, 2025
CVSS calls it high at 7.0. It is confirmed in active exploitation. It sits in the 98.2th percentile for exploit probability.
⚡ An unauthorized user can easily bypass security features in Microsoft Management Console, like a guest slipping through a hotel door meant for staff only! 🚪 Think of it like a restaurant where anyone can walk into the staff area and access the kitchen — that's what this flaw allows! The console doesn't properly check who is trying to enter, leading to potentially disastrous results. An attacker exploiting this vulnerability could gain unauthorized access to sensitive features, potentially altering system configurations or accessing confidential data. This could lead to system mismanagement or a complete breach of your infrastructure, which is absolutely devastating!
Think of it like a restaurant where anyone can walk into the staff area and access the kitchen — that's what this flaw allows! The console doesn't properly check who is trying to enter, leading to potentially disastrous results. The vulnerability stems from improper neutralization in the Microsoft Management Console, allowing an unauthorized attacker to bypass local security features, thereby gaining elevated privileges.
An attacker exploiting this vulnerability could gain unauthorized access to sensitive features, potentially altering system configurations or accessing confidential data. This could lead to system mismanagement or a complete breach of your infrastructure, which is absolutely devastating! To mitigate this risk, ensure that you apply the latest security updates from Microsoft and review your security configurations in the Management Console. Implement strict access controls to minimize exposure and monitor for any unauthorized access attempts. You've got this! Follow these steps to secure your system and become a security hero! 🦸♀️
| Product | Versions | Fixed in |
|---|---|---|
| microsoft/windows_10_1507 | < 10.0.10240.20947 | 10.0.10240.20947 |
| microsoft/windows_10_1507 | < 10.0.10240.20947 | 10.0.10240.20947 |
| microsoft/windows_10_1607 | < 10.0.14393.7876 | 10.0.14393.7876 |
| microsoft/windows_10_1607 | < 10.0.14393.7876 | 10.0.14393.7876 |
| microsoft/windows_10_1809 | < 10.0.17763.7009 | 10.0.17763.7009 |
| microsoft/windows_10_1809 | < 10.0.17763.7009 | 10.0.17763.7009 |
| microsoft/windows_10_21h2 | < 10.0.19044.5608 | 10.0.19044.5608 |
| microsoft/windows_10_21h2 | < 10.0.19044.5608 | 10.0.19044.5608 |
| microsoft/windows_10_21h2 | < 10.0.19044.5608 | 10.0.19044.5608 |
| microsoft/windows_10_22h2 | < 10.0.19045.5608 | 10.0.19045.5608 |
| microsoft/windows_10_22h2 | < 10.0.19045.5608 | 10.0.19045.5608 |
| microsoft/windows_10_22h2 | < 10.0.19045.5608 | 10.0.19045.5608 |
| microsoft/windows_11_22h2 | < 10.0.22621.5039 | 10.0.22621.5039 |
| microsoft/windows_11_22h2 | < 10.0.22621.5039 | 10.0.22621.5039 |
| microsoft/windows_11_23h2 | < 10.0.22631.5039 | 10.0.22631.5039 |
| microsoft/windows_11_23h2 | < 10.0.22631.5039 | 10.0.22631.5039 |
| microsoft/windows_11_24h2 | < 10.0.26100.3403 | 10.0.26100.3403 |
| microsoft/windows_11_24h2 | < 10.0.26100.3403 | 10.0.26100.3403 |
| microsoft/windows_server_2008 | all versions | — |
| microsoft/windows_server_2008 | all versions | — |
| microsoft/windows_server_2008 | all versions | — |
| microsoft/windows_server_2012 | all versions | — |
| microsoft/windows_server_2012 | all versions | — |
| microsoft/windows_server_2016 | < 10.0.14393.7876 | 10.0.14393.7876 |
| microsoft/windows_server_2019 | < 10.0.17763.7009 | 10.0.17763.7009 |
| microsoft/windows_server_2022 | < 10.0.20348.3270 | 10.0.20348.3270 |
| microsoft/windows_server_2022_23h2 | < 10.0.25398.1486 | 10.0.25398.1486 |
| microsoft/windows_server_2025 | < 10.0.26100.3403 | 10.0.26100.3403 |