Dec 2025: Windows Admin Center Elevation of Privilege Vulnerability
CVE-2025-64669 Published on December 11, 2025
Windows Admin Center Elevation of Privilege Vulnerability
Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges locally.
Weakness Type
What is an Authorization Vulnerability?
The software does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
CVE-2025-64669 has been classified to as an Authorization vulnerability or weakness.
Products Associated with CVE-2025-64669
Want to know whenever a new CVE is published for Microsoft Windows Admin Center? stack.watch will email you.
Affected Versions
Microsoft Windows Admin Center:- Version 1809.0 and below 2.6.2.6 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.