⚠ Actively exploited in ransomware campaigns
This vulnerability is on the CISA Known Exploited Vulnerabilities list and has been used in known ransomware attacks. CISA required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.. Due date: 2025-04-01.
CVE-2025-26633 — Improper Neutralization in Microsoft Windows 10 Version 1507
Severity
7.0HIGHNVD
EPSS
19.6%
top 4.58%
CISA KEV
KEVRansomware
Added 2025-03-11
Due 2025-04-01
Exploit
PoC available
Public exploit / PoC exists
Affected products
Timeline
PublishedMar 11
KEV addedMar 11
KEV dueApr 1
Latest updateApr 8
CISA Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Description
Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.0 | Impact: 5.9
Affected Packages26 packages
🔴Vulnerability Details
3GHSA▶
GHSA-8xfh-434c-qfv7: Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally↗2025-03-11
💥Exploits & PoCs
1📋Vendor Advisories
2🕵️Threat Intelligence
27Bleepingcomputer
▶