Product:
Azure Portal Windows Admin Center
Summary
Improper access control in Azure Portal Windows Admin Center allows an authorized attacker to elevate privileges locally. This vulnerability can lead to significant security risks if exploited. Attackers with local access can gain higher privileges than intended, potentially compromising the system.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2026-23660 |
Exploitation
To exploit this vulnerability, an attacker must have local access to the Azure Portal Windows Admin Center. Once access is obtained, the attacker can manipulate the access controls to elevate their privileges, allowing them to perform unauthorized actions within the system.
Affected Products
- Azure Portal Windows Admin Center: A management tool that allows users to manage their Azure resources and services.
Mitigation
To mitigate this vulnerability, it is essential to implement strict access controls and regularly review user permissions. Ensuring that only authorized personnel have local access to the Azure Portal Windows Admin Center can help prevent exploitation. Additionally, applying security updates and patches provided by Microsoft is crucial.