CVE-2025-26633 - Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability

Microsoft | Windows

• Date Added:
• 2025-03-11

• Due Date:
• 2025-04-01

Vulnerability Name

Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability

Description

Microsoft Windows Management Console (MMC) contains an improper neutralization vulnerability that allows an unauthorized attacker to execute code over a network.

Known To Be Used in Ransomware Campaigns?

Unknown

Action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Additional Notes

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-26633 ; https://nvd.nist.gov/vuln/detail/CVE-2025-26633

Latest Security News

Apple Releases Patch for WebKit Zero-Day Vulnerability Exploited in Targeted Attacks

North Korean Lazarus hackers infect hundreds via npm packages

Apple fixes WebKit zero-day exploited in ‘extremely sophisticated’ attacks

Windows 10 KB5053606 update fixes broken SSH connections

Microsoft March 2025 Patch Tuesday fixes 7 zero-days, 57 flaws

Windows 11 KB5053598 & KB5053602 cumulative updates released

Microsoft replacing Remote Desktop app with Windows App in May

MassJacker malware uses 778,000 wallets to steal cryptocurrency

Common Alerts

HighRemote OS Command Injection

MediumCSP: script-src unsafe-eval

MediumAuthentication Credentials Captured

MediumSession ID in URL Rewrite

InformationalContent Security Policy (CSP) Report-Only Header Found

MediumX-Frame-Options Setting Malformed

LowX-Debug-Token Information Leak

MediumX-ChromeLogger-Data (XCOLD) Header Information Leak

HighCross Site Scripting (Persistent)

MediumRelative Path Confusion

Top CVE List

CVE-2024-50302 Linux Kernel Use of Uninitialized Resource Vulnerability

CVE-2024-41710 Mitel SIP Phones Argument Injection Vulnerability

CVE-2025-22224 VMware ESXi and Workstation TOCTOU Race Condition Vulnerability

CVE-2020-29574 CyberoamOS (CROS) SQL Injection Vulnerability

CVE-2025-24989 Microsoft Power Pages Improper Access Control Vulnerability

CVE-2025-22225 VMware ESXi Arbitrary Write Vulnerability

CVE-2025-22226 VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability

CVE-2024-49035 Microsoft Partner Center Improper Access Control Vulnerability

CVE-2022-43939 Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability

CVE-2025-0411 7-Zip Mark of the Web Bypass Vulnerability

Top CWE List

CWE-693 Protection Mechanism Failure

CWE-1426 Improper Validation of Generative AI Output

HighCWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

HighCWE-200 Exposure of Sensitive Information to an Unauthorized Actor

CWE-1125 Excessive Attack Surface

CWE-1191 On-Chip Debug and Test Interface With Improper Access Control

CWE-1230 Exposure of Sensitive Information Through Metadata

CWE-1298 Hardware Logic Contains Race Conditions

CWE-1064 Invokable Control Element with Signature Containing an Excessive Number of Parameters

CWE-1101 Reliance on Runtime Component in Generated Code