Improper access control in Windows Admin Center allows an authorized attacker to gain higher privileges over the network. The vulnerability is a classic privilege escalation flaw that could enable an attacker with network access to elevate their rights and potentially execute arbitrary actions on the target system.

Microsoft Windows Admin Center deployed within the Azure Portal is affected. No specific version information is provided, so all deployments using this component should be reviewed.

The vulnerability scores a CVSS of 8.8, indicating high severity. EPSS data is unavailable, and it is not listed in the CISA KEV catalog. Inferred from the description, the attack requires an authorized attacker with network access to the Windows Admin Center instance; no local privilege or user interaction is explicitly required. The high CVSS score suggests significant potential impact if mitigated improperly.