H3XAOperational intelligence
Live analytical pictureEvidence before assessment
Threat intelligence / Vulnerability

CVE-2025-26633

Microsoft Windows Management Console (MMC) contains an improper neutralization vulnerability that allows an unauthorized attacker to bypass a security feature locally.

Vulnerability
TypeVulnerability
External ID—
First seen2025-03-11
Last seen2025-03-11

Confidence

—

Microsoft Windows Management Console (MMC) contains an improper neutralization vulnerability that allows an unauthorized attacker to bypass a security feature locally.

Labels

exploitedkevransomware

CISA KEV context

Vendor / productMicrosoft Windows
Added2025-03-11
Due date2025-04-01
17 recorded

Relationships

mitigates
from Remediate CVE-2025-26633
Mitigation
related-to
to Blind SQL Injection
Technique
related-to
to Data Interchange Protocol Manipulation
Technique
related-to
to Embedding NULL Bytes
Technique
related-to
to Exploiting Multiple Input Interpretation Layers
Technique
related-to
to Generic Cross-Browser Cross-Domain Theft
Technique
related-to
to Inter-component Protocol Manipulation
Technique
related-to
to Postfix, Null Terminate, and Backslash
Technique
related-to
to SOAP Manipulation
Technique
related-to
to Using Escaped Slashes in Alternate Encoding
Technique
related-to
to Using Leading 'Ghost' Character Sequences to Bypass Input Filters
Technique
related-to
to Using Slashes and URL Encoding Combined to Bypass Validation Logic
Technique
related-to
to Using Slashes in Alternate Encoding
Technique
related-to
to Web Services Protocol Manipulation
Technique
related-to
to XML Injection
Technique
related-to
to XPath Injection
Technique
related-to
to XQuery Injection
Technique
2 external

References

nvd
CVE-2025-26633
open
cwe
CWE-707
open
Continue into the dataIntelligence explorerHow to read the graphEvidence & provenance