Microsoft Discloses Windows Elevation of Privilege Vulnerabilities

Microsoft published security advisories for two Elevation of Privilege flaws affecting Windows components: CVE-2026-23660 in Windows Admin Center in Azure Portal and CVE-2025-62472 in Windows Remote Access Connection Manager. Both entries were released through Microsoft's Security Update Guide, identifying separate privilege-escalation issues in enterprise-relevant Windows management and connectivity functionality.

The disclosures indicate that attackers who successfully exploit the vulnerabilities could gain higher privileges on affected systems, increasing the risk of broader compromise after initial access. Organizations using Windows administrative tooling in Azure environments and systems relying on Remote Access Connection Manager should review Microsoft's advisories, determine exposure to the affected components, and prioritize applicable security updates and mitigation steps.