Medium severity6.7NVD Advisory· Published Nov 11, 2025· Updated Jun 17, 2026
CVE-2025-47179
CVE-2025-47179
Description
Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges locally.
Affected products
6- Range: 1.0.0
- cpe:2.3:a:microsoft:configuration_manager_2403:*:*:*:*:*:*:*:*Range: <5.00.9128.1037
cpe:2.3:a:microsoft:configuration_manager_2409:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:microsoft:configuration_manager_2409:*:*:*:*:*:*:*:*range: <5.00.9132.1031
- (no CPE)range: 1.0.0
- cpe:2.3:a:microsoft:configuration_manager_2503:*:*:*:*:*:*:*:*Range: <5.0.9135.1013
Patches
Vulnerability mechanics
References
1- msrc.microsoft.com/update-guide/vulnerability/CVE-2025-47179nvdVendor Advisory
News mentions
0No linked articles in our index yet.