Skip to content
Threat Feed
Subscribe

Tag

Sccm

2 briefs RSS
low advisory

Privilege Escalation in Microsoft Configuration Manager AdminService API

CVE-2025-59501 is a privilege escalation vulnerability in the Microsoft Configuration Manager (SCCM) AdminService API that allows authenticated, low-privileged users to achieve full administrative control when Entra ID integration is enabled.

Configuration Manager 2403 +2 privilege-escalation sccm vulnerability
1t 1c
medium advisory

Potential Windows Session Hijacking via CcmExec

Adversaries may exploit Microsoft's System Center Configuration Manager by loading malicious DLLs into SCNotification.exe, a process associated with user notifications, potentially leading to Windows session hijacking.

System Center Configuration Manager defense-evasion dll-hijacking sccm
2r 1t