CVE-2025-26633 | Attaxion

CISA Known Exploited Vulnerability (KEV)

Name

Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability

Exploit added

March 11, 2025

Action due

April 1, 2025

Action required

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Description

Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-26633

Weakness Enumeration

CWE-ID	CWE Name
CWE-707	Improper Neutralization

Known Affected Software Configurations

cpe:2.3:o:microsoft:windows_10_21h2:10.0.19044.5487::::::x86:
cpe:2.3:o:microsoft:windows_10_21h2:10.0.19044.5371::::::x86:
cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.6893::::::x86:
cpe:2.3:o:microsoft:windows_10_21h2:10.0.19044.5371::::::arm64:
cpe:2.3:o:microsoft:windows_11_22h2:10.0.22621.4751::::::x64:
cpe:2.3:o:microsoft:windows_10_1507:10.0.10240.20890::::::x86:
cpe:2.3:o:microsoft:windows_10_21h2:10.0.19044.5371::::::x64:
cpe:2.3:o:microsoft:windows_10_1507:10.0.10240.20890::::::x64:
cpe:2.3:o:microsoft:windows_11_24h2:10.0.26100.3107::::::x64:
cpe:2.3:o:microsoft:windows_11_22h2:10.0.22621.4890::::::x64:
cpe:2.3:o:microsoft:windows_10_1507:10.0.10240.20915::::::x86:
cpe:2.3:o:microsoft:windows_10_22h2:10.0.19045.5371::::::arm64:
cpe:2.3:o:microsoft:windows_10_22h2:10.0.19045.5487::::::arm64:
cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.6893::::::x64:
cpe:2.3:o:microsoft:windows_10_21h2:10.0.19044.5487::::::x64:
cpe:2.3:o:microsoft:windows_11_24h2:10.0.26100.2894::::::arm64:
cpe:2.3:o:microsoft:windows_11_24h2:10.0.26100.3194::::::x64:
cpe:2.3:o:microsoft:windows_11_24h2:10.0.26100.3107::::::arm64:
cpe:2.3:o:microsoft:windows_11_23h2:10.0.22631.4890::::::arm64:
cpe:2.3:o:microsoft:windows_10_1607:10.0.14393.7785::::::x64:
cpe:2.3:o:microsoft:windows_10_22h2:10.0.19045.5487::::::x64:
cpe:2.3:o:microsoft:windows_11_23h2:10.0.22631.4751::::::x64:
cpe:2.3:o:microsoft:windows_11_23h2:10.0.22621.4751::::::arm64:
cpe:2.3:o:microsoft:windows_10_22h2:10.0.19045.5371::::::x86:
cpe:2.3:o:microsoft:windows_10_22h2:10.0.19045.5487::::::x86:
cpe:2.3:o:microsoft:windows_10_1507:10.0.10240.20915::::::x64:
cpe:2.3:o:microsoft:windows_10_1607:10.0.14393.7785::::::x86:
cpe:2.3:o:microsoft:windows_11_24h2:10.0.26100.2894::::::x64:
cpe:2.3:o:microsoft:windows_10_1607:10.0.14393.7699::::::x64:
cpe:2.3:o:microsoft:windows_11_23h2:10.0.22631.4890::::::x64:
cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.6775::::::x64:
cpe:2.3:o:microsoft:windows_10_22h2:10.0.19045.5371::::::x64:
cpe:2.3:o:microsoft:windows_10_1607:10.0.10240.20915::::::x64:
cpe:2.3:o:microsoft:windows_10_21h2:10.0.19044.5487::::::arm64:
cpe:2.3:o:microsoft:windows_11_22h2:10.0.22621.4890::::::arm64:
cpe:2.3:o:microsoft:windows_10_1607:10.0.10240.20915::::::x86:
cpe:2.3:o:microsoft:windows_11_24h2:10.0.26100.3194::::::arm64:
cpe:2.3:o:microsoft:windows_11_22h2:10.0.22621.4751::::::arm64:
cpe:2.3:o:microsoft:windows_10_1607:10.0.14393.7699::::::x86:
cpe:2.3:o:microsoft:windows_server_2022:10.0.20348.2966:::::::*
cpe:2.3:o:microsoft:windows_server_2022:10.0.20348.2762:::::::*
cpe:2.3:o:microsoft:windows_server_2022:10.0.20348.2201:::::::*
cpe:2.3:o:microsoft:windows_10_21h2:10.0.19044.5247::::::x86:
cpe:2.3:o:microsoft:windows_10_22h2:10.0.19041.3920::::::x64:
cpe:2.3:o:microsoft:windows_10_22h2:10.0.19041.3920::::::x86:
cpe:2.3:o:microsoft:windows_10_21h2:10.0.19041.3920::::::x86:
cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.6659::::::x86:
cpe:2.3:o:microsoft:windows_10_1607:10.0.14393.7428::::::x64:
cpe:2.3:o:microsoft:windows_10_21h2:10.0.19044.5247::::::x64:
cpe:2.3:o:microsoft:windows_10_21h2:10.0.19044.5247::::::arm64:
cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.6659::::::x64:
cpe:2.3:o:microsoft:windows_10_1507:10.0.10240.20857::::::x86:
cpe:2.3:o:microsoft:windows_10_1507:10.0.10240.20857::::::x64:
cpe:2.3:o:microsoft:windows_10_1507:10.0.10240.20796::::::x64:
cpe:2.3:o:microsoft:windows_10_21h2:10.0.19041.3920::::::x64:
cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.6414::::::x64:
cpe:2.3:o:microsoft:windows_10_21h2:10.0.19044.5011::::::x64:
cpe:2.3:o:microsoft:windows_10_1607:10.0.14393.7606::::::x64:
cpe:2.3:o:microsoft:windows_10_22h2:10.0.19045.5247::::::x64:
cpe:2.3:o:microsoft:windows_10_1607:10.0.14393.7606::::::x86:
cpe:2.3:o:microsoft:windows_10_22h2:10.0.19045.5247::::::x86:
cpe:2.3:o:microsoft:windows_10_22h2:10.0.19045.5247::::::arm64:
cpe:2.3:o:microsoft:windows_10_22h2:10.0.19045.5011::::::x64:
cpe:2.3:o:microsoft:windows_10_1607:10.0.14393.6897::::::x86:
cpe:2.3:o:microsoft:windows_10_1607:10.0.14393.6897::::::x64:
cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.5576::::::x64:
cpe:2.3:o:microsoft:windows_10_1507:10.0.10240.20596::::::x64:
cpe:2.3:o:microsoft:windows_10_1507:10.0.10240.20596::::::x86:
cpe:2.3:o:microsoft:windows_10_22h2:10.0.19045.4412::::::arm64:
cpe:2.3:o:microsoft:windows_10_22h2:10.0.19045.4412::::::x64:
cpe:2.3:o:microsoft:windows_10_22h2:10.0.19045.4291::::::x86:
cpe:2.3:o:microsoft:windows_10_22h2:10.0.19045.4291::::::arm64:
cpe:2.3:o:microsoft:windows_10_22h2:10.0.19045.4412::::::x86:
cpe:2.3:o:microsoft:windows_10_22h2:10.0.19045.4291::::::x64:
cpe:2.3:o:microsoft:windows_10_22h2:10.0.19045.4170::::::x86:
cpe:2.3:o:microsoft:windows_10_22h2:10.0.19045.4170::::::arm64:
cpe:2.3:o:microsoft:windows_10_22h2:10.0.19045.4651::::::arm64:
cpe:2.3:o:microsoft:windows_10_22h2:10.0.19045.4170::::::x64:
cpe:2.3:o:microsoft:windows_10_1607:10.0.14393.6709::::::x86:
cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.5122::::::x64:
cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.5820::::::x64:
cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.5122::::::x86:
cpe:2.3:o:microsoft:windows_10_22h2:10.0.19045.4651::::::x64:
cpe:2.3:o:microsoft:windows_10_21h2:10.0.19044.4291::::::x64:
cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.5820::::::x86:
cpe:2.3:o:microsoft:windows_10_1607:10.0.14393.6709::::::x64:
cpe:2.3:o:microsoft:windows_10_21h2:10.0.19044.4291::::::x86:
cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.6532::::::x64:
cpe:2.3:o:microsoft:windows_10_1607:10.0.14393.5582::::::x86:
cpe:2.3:o:microsoft:windows_10_1607:10.0.14393.5582::::::x64:
cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.6532::::::x86:
cpe:2.3:o:microsoft:windows_10_1507:10.0.10240.20651::::::x64:
cpe:2.3:o:microsoft:windows_10_1507:10.0.10240.20826::::::x86:
cpe:2.3:o:microsoft:windows_10_1507:10.0.10240.20826::::::x64:
cpe:2.3:o:microsoft:windows_10_1507:10.0.10240.20766::::::x64:
cpe:2.3:o:microsoft:windows_10_22h2:10.0.19045.4651::::::x86:
cpe:2.3:o:microsoft:windows_10_1507:10.0.10240.20766::::::x86:
cpe:2.3:o:microsoft:windows_10_1507:10.0.10240.20751::::::x64:
cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.6189::::::x64:
cpe:2.3:o:microsoft:windows_10_1507:10.0.10240.20710::::::x64:

Details

Source:
NVD

Published:
March 11, 2025

Updated:
March 13, 2025

Risk information

CVSS v3

Base score:
7

Severity:

HIGH

Vector:
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2

Not defined