CVE-2025-26633CISA KEV: Actively Exploited

Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability

Published Mar 11, 2025·Updated Mar 11, 2025

Description

Microsoft Windows Management Console (MMC) contains an improper neutralization vulnerability that allows an unauthorized attacker to bypass a security feature locally.

Public Exploits & PoCs1 found

PoC: MSC-EvilTwin-Local-Privilege-Escalation

CVE-2025-26633 (CVSS 7.8) – Zero-day MMC .msc EvilTwin LPE actively exploited by Water Gamayun APT. PoC creates local admin via malicious MSC file on unpatched Windows 10/11/Server. Patched March 2025. Authorized testing only.

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Start monitoring free