Tuesday, August 11, 2026
LIVEThe Unrelenting Cyber Battle: Hacking Threats and the Imperative of Robust Data Protection///Navigating the Cyber Labyrinth: Bolstering Defenses Against Evolving Hacking Threats///The Dual Front War: Battling Hacking and Bolstering Data Protection in the Digital Age///The Ever-Evolving Cyber Threat Landscape: Navigating Hacking and Fortifying Data Protection///The Unseen Battle: Fortifying Data in an Age of Relentless Hacking///The Unseen War: Hacking's Relentless Advance and the Imperative of Data Protection///The Evolving Threat Landscape: Hacking, Data Protection, and the Imperative for Proactive Security///Navigating the Digital Minefield: Bolstering Data Protection in an Era of Relentless Hacking///The Dual Fronts of Digital Defense: Combating Hacking and Fortifying Data Protection///Hacking's New Frontier: Fortifying Data Protection in the Age of Advanced Cyber Threats///The Dual Front: Navigating Hacking Threats and Fortifying Data Protection in the Digital Age///Navigating the Digital Gauntlet: The Evolving Nexus of Hacking and Data Protection///The Unrelenting Cyber Battle: Hacking Threats and the Imperative of Robust Data Protection///Navigating the Cyber Labyrinth: Bolstering Defenses Against Evolving Hacking Threats///The Dual Front War: Battling Hacking and Bolstering Data Protection in the Digital Age///The Ever-Evolving Cyber Threat Landscape: Navigating Hacking and Fortifying Data Protection///The Unseen Battle: Fortifying Data in an Age of Relentless Hacking///The Unseen War: Hacking's Relentless Advance and the Imperative of Data Protection///The Evolving Threat Landscape: Hacking, Data Protection, and the Imperative for Proactive Security///Navigating the Digital Minefield: Bolstering Data Protection in an Era of Relentless Hacking///The Dual Fronts of Digital Defense: Combating Hacking and Fortifying Data Protection///Hacking's New Frontier: Fortifying Data Protection in the Age of Advanced Cyber Threats///The Dual Front: Navigating Hacking Threats and Fortifying Data Protection in the Digital Age///Navigating the Digital Gauntlet: The Evolving Nexus of Hacking and Data Protection///
Subscribe
Cyber Security
Independent · Digital
Thehackingpost
RSSSubscribe
CybersecurityAI-assisted

Windows Admin Center Vulnerability (CVE-2025-64669) Let Attackers Escalate Privileges

A local privilege escalation vulnerability has been identified in Microsoft's Windows Admin Center (WAC), affecting versions up to 2.4.2.1, including environments running WAC 2411 and earlier. The vulnerability is tracked as CVE-2025-64669.

EBy Eleanor TateDec 16, 20251 min read

A local privilege escalation vulnerability has been identified in Microsoft's Windows Admin Center (WAC), affecting versions up to 2.4.2.1, including environments running WAC 2411 and earlier. The vulnerability is tracked as CVE-2025-64669.

The flaw is due to insecure directory permissions on the folder C:\ProgramData\WindowsAdminCenter . This directory is writable by standard users and used by services running with elevated privileges. As Windows Admin Center is widely utilized for managing Windows Server, clusters, hyper-converged infrastructure, and Windows 10/11 endpoints, this issue presents a significant risk across technology layers.

The vulnerability allows standard users with local filesystem access on WAC hosts to potentially escalate privileges. Researchers identified that the writable directory hosts components and processes operating under NETWORK SERVICE and SYSTEM privileges, which can compromise Windows security boundaries.

Analysis revealed two exploitation chains allowing low-privileged users to gain SYSTEM-level access:

The flaw is due to insecure directory permissions on the folder C:\ProgramData\WindowsAdminCenter .
Eleanor Tate · Thehackingpost

Extension Uninstall Mechanism: By exploiting the extension uninstall process, an attacker can execute PowerShell scripts with elevated privileges. Updater DLL Loading Flaw: A race condition in the updater component allows loading malicious DLLs with SYSTEM privileges.

Microsoft has confirmed the vulnerability and assigned it an Important severity rating. Cymulate has integrated a scenario into its Exposure Validation platform to help organizations assess and validate their exposure to this vulnerability.

Microsoft plans to release a fix in the December 10, 2025 Patch Tuesday update. Organizations are advised to monitor and apply the corresponding updates promptly to mitigate potential risks.

Advertisement

For further information and updates, organizations can refer to Microsoft's official security advisory .

Based on reporting by Cyber Security News.

AI transparency. This article was produced with the assistance of artificial intelligence and published under human editorial oversight. AI systems can make mistakes. Read how we use AI (EU AI Act, Art. 50).
Related Stories
Cybersecurity

Why Fintech Banking Platforms Are Reducing Operational Costs by 40%

Paige Monroe · Mar 26, 2026
Cybersecurity

Dogecoin Price Prediction: SHIB Burns 172M Tokens as Pepeto Exchange Earns From Every Trade

Eric Wallace · Mar 26, 2026
Cybersecurity

Solana Price Prediction: SOL Holds $86 With Commodity Status as Pepeto Targets Bigger Returns

Zachary Burns · Mar 26, 2026
Cybersecurity

Open Directory Malware Campaign Uses Obfuscated VBS, PNG Loaders and RAT Payloads

Joseph Cain · Mar 26, 2026