CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2025-03-11
Microsoft Management Console (MMC) Security Feature Bypass Vulnerability (CVE-2025-26633) Technical Advisory
[Affected Scope] Microsoft Management Console (MMC) component across various supported Microsoft Windows operating systems
[Impact] Local attackers can bypass critical security boundaries and Mark-of-the-Web (MotW) protections via user interaction, potentially leading to privilege escalation and arbitrary code execution
[Mitigation] Apply the latest Microsoft cumulative security updates immediately and restrict the execution of untrusted .msc files using AppLocker or WDAC