CVE-2025-26633

CVE-2025-26633 is an improper neutralization vulnerability in the Microsoft Management Console (MMC) that enables an unauthorized attacker to bypass a security feature locally. Published on 2025-03-11, the issue is associated with CWE-707 and carries a CVSS v3.1 base score of 7.0 (AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H), indicating high potential impact despite requiring local access and user interaction.

An unauthorized attacker with local access to the system can exploit this vulnerability, which demands high attack complexity and user interaction but no special privileges. Successful exploitation allows the attacker to achieve high impacts on confidentiality, integrity, and availability, effectively bypassing MMC security controls.

Microsoft's Security Response Center provides an update guide for remediation at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-26633. Vicarius offers a detection script at https://www.vicarius.io/vsociety/posts/cve-2025-26633-security-feature-bypass-in-microsoft-management-console-detection-script and a mitigation script at https://www.vicarius.io/vsociety/posts/cve-2025-26633-security-feature-bypass-in-microsoft-management-console-mitigation-script.

The vulnerability is listed in CISA's Known Exploited Vulnerabilities catalog at https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-26633, indicating real-world exploitation.