CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Microsoft Management Console (MMC) Security Feature Bypass Vulnerability (CVE-2025-26633) Technical Advisory
[Affected Scope] Microsoft Management Console (MMC) component across various supported Microsoft Windows operating systems
[Impact] Local attackers can bypass critical security boundaries and Mark-of-the-Web (MotW) protections via user interaction, potentially leading to privilege escalation and arbitrary code execution
[Mitigation] Apply the latest Microsoft cumulative security updates immediately and restrict the execution of untrusted .msc files using AppLocker or WDAC
Microsoft Management Console (MMC) Remote Code Execution Vulnerability (CVE-2024-43572) Analysis and Mitigation Guide
[Affected Scope] Microsoft Windows operating systems utilizing Microsoft Management Console (MMC) and .msc console files
[Impact] Successful exploitation allows an attacker to execute arbitrary code with the privileges of the active user by tricking them into opening a crafted .msc file
[Mitigation] Apply the official Microsoft security updates immediately and restrict the execution of untrusted .msc files