The vulnerability is an improper access control flaw in the Azure Portal implementation of Windows Admin Center that enables an attacker who already has authorized access to elevate their privileges locally. The flaw leads to a local privilege escalation, potentially granting the attacker administrative rights on the system where the Admin Center is running. This weakness aligns with CWE‑284 (Improper Access Control).

The affected product is Microsoft Windows Admin Center as accessed through the Azure Portal. Specific affected versions are not listed in the provided data. The Common Platform Enumeration strings indicate the Azure Portal Windows Admin Center and Windows Admin Center products across all versions.

The CVSS score of 7.8 indicates a high severity of the vulnerability, while the EPSS score of less than 1% suggests a low probability of exploitation currently. The vulnerability is not present in the CISA Known Exploited Vulnerabilities catalog. Based on the description, the likely attack vector is an authorized user within the Azure Portal who can exploit the improper access control to gain elevated local privileges. No additional exploitation prerequisites are stated in the available information.