Windows Admin Center vulnerabilities

2 known vulnerabilities in Windows Admin Center from Microsoft. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Remote Desktop Web Client: Exposure of Private Personal Information to an Unauthorized Actor

  CVE-2026-56171Jul 17, 2026Microsoft

  Exposure of private personal information to an unauthorized actor in Windows RDP allows an unauthorized attacker to disclose information over a network.

• 8.8 High severity

  Windows Admin Center: Improper Neutralization of Special Elements used in a Command

  CVE-2026-56197Jul 14, 2026Microsoft

  Improper neutralization of special elements used in a command ('command injection') in Windows Admin Center allows an authorized attacker to execute code over a network.