Microsoft Windows Admin Center

Name: Microsoft Windows Admin Center
Brand: Microsoft

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

2critical12high3medium0low

updated 2026-10-27

vulnerabilities (230)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-33824US	—OT critical	77.1% (100th)	KEV	no fix	2026-04-14	≤ vers:unknown/*
CVE-2026-32202US	—OT critical	70.9% (99th)	KEV	no fix	2026-04-14	≤ vers:unknown/*
CVE-2026-41089US	—	79.6% (100th)	Exploit	no fix	2026-05-12	≤ vers:unknown/*
CVE-2026-26119US	—	11.3% (96th)	Exploit	2511	2026-02-17	2 versions
CVE-2026-40369US	—	4.72% (92nd)	Exploit	no fix	2026-05-12	≤ vers:unknown/*
CVE-2026-33829US	—	3.51% (89th)	Exploit	no fix	2026-04-14	≤ vers:unknown/*
CVE-2026-41096US	—	2.70% (86th)	Exploit	no fix	2026-05-12	≤ vers:unknown/*
CVE-2026-33827US	—	0.84% (58th)	Exploit	no fix	2026-04-14	≤ vers:unknown/*
CVE-2026-33826US	—	0.53% (45th)	Exploit	no fix	2026-04-14	≤ vers:unknown/*
CVE-2026-32223US	—	0.52% (44th)	Exploit	no fix	2026-04-14	≤ vers:unknown/*
CVE-2026-26179US	—	0.44% (38th)	Exploit	no fix	2026-04-14	≤ vers:unknown/*
CVE-2026-27912US	—	0.41% (35th)	Exploit	no fix	2026-04-14	≤ vers:unknown/*
CVE-2026-34344US	—	0.31% (24th)	Exploit	no fix	2026-05-12	≤ vers:unknown/*
CVE-2026-25250US	—	0.12% (2nd)	Exploit	no fix	2026-08-27	≤ vers:unknown/*
CVE-2019-0813US	critical9.8	3.54% (89th)	—	no fix	2019-04-09	≤ unspecified
CVE-2021-27066US	medium4.0	3.04% (87th)	—	publication	2021-03-11	1809.0 → publication
CVE-2026-40398US	—	2.67% (86th)	—	no fix	2026-05-12	≤ vers:unknown/*
CVE-2026-27914US	—	2.43% (84th)	—	no fix	2026-04-14	≤ vers:unknown/*
CVE-2026-26169US	—	2.31% (83rd)	—	no fix	2026-04-14	≤ vers:unknown/*
CVE-2026-33835US	—	2.12% (82nd)	—	no fix	2026-05-12	≤ vers:unknown/*
CVE-2026-33840US	—	2.01% (81st)	—	no fix	2026-05-12	≤ vers:unknown/*
CVE-2026-32162US	—	1.92% (80th)	—	no fix	2026-04-14	≤ vers:unknown/*
CVE-2023-29347US	medium6.8	1.88% (79th)	—	2306	2023-07-11	1809.0 → 2306
CVE-2026-33837US	—	1.84% (79th)	—	no fix	2026-05-12	≤ vers:unknown/*
CVE-2026-27909US	—	1.77% (78th)	—	no fix	2026-04-14	≤ vers:unknown/*
CVE-2026-35416US	—	1.65% (76th)	—	no fix	2026-05-12	≤ vers:unknown/*
CVE-2026-27908US	—	1.55% (75th)	—	no fix	2026-04-14	≤ vers:unknown/*
CVE-2026-41097US	—	1.42% (73rd)	—	no fix	2026-05-12	≤ vers:unknown/*
CVE-2026-33096US	—	1.25% (69th)	—	no fix	2026-04-14	≤ vers:unknown/*
CVE-2026-32225US	—	1.20% (68th)	—	no fix	2026-04-14	≤ vers:unknown/*
CVE-2026-27921US	—	1.19% (68th)	—	no fix	2026-04-14	≤ vers:unknown/*
CVE-2026-35424US	—	1.19% (68th)	—	no fix	2026-05-12	≤ vers:unknown/*
CVE-2026-32093US	—	1.12% (66th)	—	no fix	2026-04-14	≤ vers:unknown/*
CVE-2026-40405US	—	1.08% (65th)	—	no fix	2026-05-12	≤ vers:unknown/*
CVE-2026-26154US	—	1.06% (64th)	—	no fix	2026-04-14	≤ vers:unknown/*
CVE-2026-32071US	—	1.06% (64th)	—	no fix	2026-04-14	≤ vers:unknown/*
CVE-2025-29819US	—	1.05% (64th)	—	2.4.2.1	2025-04-08	1809.0 → 2.4.2.1
CVE-2026-59115US	—	1.02% (63rd)	—	no fix	2026-08-07	≤ vers:unknown/*
CVE-2026-49163US	—	1.02% (63rd)	—	no fix	2026-08-07	≤ vers:unknown/*
CVE-2026-56196US	—	1.02% (63rd)	—	2.7.4	2026-07-14	3 versions
CVE-2026-47299US	—	1.01% (63rd)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-56197US	—	0.99% (62nd)	—	2.7.4	2026-07-14	3 versions
CVE-2026-68823US	—	0.93% (61st)	—	no fix	2026-08-07	≤ vers:unknown/*
CVE-2026-40406US	—	0.93% (60th)	—	no fix	2026-05-12	≤ vers:unknown/*
CVE-2026-56162US	—	0.90% (60th)	—	no fix	2026-08-07	≤ vers:unknown/*
CVE-2026-26155US	—	0.89% (59th)	—	no fix	2026-04-14	≤ vers:unknown/*
CVE-2026-57104US	critical9.6	0.86% (58th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-65806US	—OT elevated	0.84% (58th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-56185US	—	0.84% (58th)	—	2.6.5.16	2026-07-14	3 versions
CVE-2026-50516US	—OT elevated	0.83% (57th)	—	no fix	2026-08-11	≤ vers:unknown/*

showing 50 of 230

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-416Use After Free68 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')41 CVEs
CWE-122Heap-based Buffer Overflow22 CVEs
CWE-415Double Free11 CVEs
CWE-125Out-of-bounds Read9 CVEs
CWE-20Improper Input Validation9 CVEs
CWE-284Improper Access Control9 CVEs
CWE-476NULL Pointer Dereference9 CVEs

sources (4)

Which sources assert this record, and when.

NLNCSC-NL (CSAF)216 CVEs
EUEU Vulnerability Database (ENISA)16 CVEs
USMicrosoft MSRC (CSAF)10 CVEs
DECERT-Bund (BSI CSAF)3 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan