An authorized attacker can exploit a local privilege escalation vulnerability in the Microsoft Azure Portal Windows Admin Center, potentially compromising system integrity.

This vulnerability involves improper link resolution before file access, commonly known as "link following." It requires an attacker to already possess authorized access to the system to escalate privileges locally.

Successful exploitation allows an attacker to gain elevated privileges, potentially leading to full system compromise. Given the CVSS score of 7.8, this represents a High severity risk that could result in unauthorized data access, modification of system configurations, and significant operational disruption.

Immediate Action: Apply the latest security updates provided by Microsoft for the Windows Admin Center immediately upon release.

Proactive Monitoring: Monitor system and access logs for unusual administrative activity or attempts to access restricted file paths.

Compensating Controls: Ensure the principle of least privilege is strictly enforced for all user accounts accessing the Admin Center to limit the impact of potential local exploitation.

Public Exploit Available: false

The severity of this local privilege escalation warrants immediate attention. Security teams should identify all instances of the Windows Admin Center within their environment and prioritize patching as soon as the vendor makes the security update available.