ThreatCluster

Windows Admin Center Vulnerability CVE-2025-64669 Allows Privilege Escalation

First seen 16 Dec 2025, 14:57 UTC •CyberpressCybersecuritynews •84% similarity •49

Article Content

Browse articles
ThreatCluster

A local privilege escalation vulnerability, tracked as CVE-2025-64669, has been identified in Microsoft’s Windows Admin Center (WAC), affecting versions up to 2.4.2.1. The flaw arises from insecure directory permissions in the C:\ProgramData\WindowsAdminCenter folder, which is writable by standard users but utilized by services with elevated privileges.

ThreatCluster AI How this analysis works

Extracted Entities

1 / 2

Community

Browse all →

Tracked Entities in This Story

Windows Windows Admin Center