Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability

zetlyn/cve-kev vulnerability cve CVE-2025-26633 known 2025-03-11

Properties

cwes	CWE-707 receipt Source CISA Known Exploited Vulnerabilities Its words `CWE-707` Read by `field:cwes` Said since 2026-09-28 11:44 UTC Last answered 2026-10-04 21:17 UTC What the source handed over { "cveID": "CVE-2025-26633", "cwes": "CWE-707", "dateAdded": "2025-03-11", "dueDate": "2025-04-01", "forensicTriage": "No", "knownRansomwareCampaignUse": "Known", "notes": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-26633 ; https://nvd.nist.gov/vuln/detail/CVE-2025-26633", "product": "Windows", "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "shortDescription": "Microsoft Windows Management Console (MMC) contains an improper neutralization vulnerability that allows an unauthorized attacker to bypass a security feature locally.", "vendorProject": "Microsoft", "vulnerabilityName": "Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability" }
due_date	2025-04-01 receipt Source CISA Known Exploited Vulnerabilities Its words `2025-04-01` Read by `field:dueDate` Said since 2026-09-28 11:44 UTC Last answered 2026-10-04 21:17 UTC What the source handed over { "cveID": "CVE-2025-26633", "cwes": "CWE-707", "dateAdded": "2025-03-11", "dueDate": "2025-04-01", "forensicTriage": "No", "knownRansomwareCampaignUse": "Known", "notes": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-26633 ; https://nvd.nist.gov/vuln/detail/CVE-2025-26633", "product": "Windows", "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "shortDescription": "Microsoft Windows Management Console (MMC) contains an improper neutralization vulnerability that allows an unauthorized attacker to bypass a security feature locally.", "vendorProject": "Microsoft", "vulnerabilityName": "Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability" }
exploited	yes receipt Source CISA Known Exploited Vulnerabilities Its words `yes` Read by `const:yes` Said since 2026-09-28 11:44 UTC Last answered 2026-10-04 21:17 UTC What the source handed over { "cveID": "CVE-2025-26633", "cwes": "CWE-707", "dateAdded": "2025-03-11", "dueDate": "2025-04-01", "forensicTriage": "No", "knownRansomwareCampaignUse": "Known", "notes": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-26633 ; https://nvd.nist.gov/vuln/detail/CVE-2025-26633", "product": "Windows", "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "shortDescription": "Microsoft Windows Management Console (MMC) contains an improper neutralization vulnerability that allows an unauthorized attacker to bypass a security feature locally.", "vendorProject": "Microsoft", "vulnerabilityName": "Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability" }
forensic_triage	false receipt Source CISA Known Exploited Vulnerabilities Its words `No` Read by `field:forensicTriage` Said since 2026-09-28 11:44 UTC Last answered 2026-10-04 21:17 UTC What the source handed over { "cveID": "CVE-2025-26633", "cwes": "CWE-707", "dateAdded": "2025-03-11", "dueDate": "2025-04-01", "forensicTriage": "No", "knownRansomwareCampaignUse": "Known", "notes": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-26633 ; https://nvd.nist.gov/vuln/detail/CVE-2025-26633", "product": "Windows", "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "shortDescription": "Microsoft Windows Management Console (MMC) contains an improper neutralization vulnerability that allows an unauthorized attacker to bypass a security feature locally.", "vendorProject": "Microsoft", "vulnerabilityName": "Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability" }
known_ransomware_campaign_use	Known receipt Source CISA Known Exploited Vulnerabilities Its words `Known` Read by `field:knownRansomwareCampaignUse` Said since 2026-09-28 11:44 UTC Last answered 2026-10-04 21:17 UTC What the source handed over { "cveID": "CVE-2025-26633", "cwes": "CWE-707", "dateAdded": "2025-03-11", "dueDate": "2025-04-01", "forensicTriage": "No", "knownRansomwareCampaignUse": "Known", "notes": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-26633 ; https://nvd.nist.gov/vuln/detail/CVE-2025-26633", "product": "Windows", "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "shortDescription": "Microsoft Windows Management Console (MMC) contains an improper neutralization vulnerability that allows an unauthorized attacker to bypass a security feature locally.", "vendorProject": "Microsoft", "vulnerabilityName": "Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability" }
product	Windows receipt Source CISA Known Exploited Vulnerabilities Its words `Windows` Read by `field:product` Said since 2026-09-28 11:44 UTC Last answered 2026-10-04 21:17 UTC What the source handed over { "cveID": "CVE-2025-26633", "cwes": "CWE-707", "dateAdded": "2025-03-11", "dueDate": "2025-04-01", "forensicTriage": "No", "knownRansomwareCampaignUse": "Known", "notes": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-26633 ; https://nvd.nist.gov/vuln/detail/CVE-2025-26633", "product": "Windows", "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "shortDescription": "Microsoft Windows Management Console (MMC) contains an improper neutralization vulnerability that allows an unauthorized attacker to bypass a security feature locally.", "vendorProject": "Microsoft", "vulnerabilityName": "Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability" }
vendor_project	Microsoft receipt Source CISA Known Exploited Vulnerabilities Its words `Microsoft` Read by `field:vendorProject` Said since 2026-09-28 11:44 UTC Last answered 2026-10-04 21:17 UTC What the source handed over { "cveID": "CVE-2025-26633", "cwes": "CWE-707", "dateAdded": "2025-03-11", "dueDate": "2025-04-01", "forensicTriage": "No", "knownRansomwareCampaignUse": "Known", "notes": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-26633 ; https://nvd.nist.gov/vuln/detail/CVE-2025-26633", "product": "Windows", "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "shortDescription": "Microsoft Windows Management Console (MMC) contains an improper neutralization vulnerability that allows an unauthorized attacker to bypass a security feature locally.", "vendorProject": "Microsoft", "vulnerabilityName": "Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability" }

Text

Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability Microsoft Windows Management Console (MMC) contains an improper neutralization vulnerability that allows an unauthorized attacker to bypass a security feature locally. Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-26633 ; https://nvd.nist.gov/vuln/detail/CVE-2025-26633