Actively exploited in the wild
Microsoft Windows Management Console Remote Code Execution Vulnerability
Microsoft - Windows · Listed in the CISA KEV since 2024-10-08. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CVE-2024-43572
HighCVSS 7.8KEVSummary
Remote code execution vulnerability in Microsoft Management Console (MMC). An unauthenticated attacker could potentially execute arbitrary code in the context of the user running the MMC console.
Risk Assessment
Exploitation could lead to full compromise of a workstation or server, including data theft and lateral movement within the network.
Recommendation
Apply Microsoft's October 2024 Patch Tuesday security updates as soon as possible and restrict execution of .msc files from untrusted sources.
Other vulnerabilities in Microsoft Management Console
See all- CVE-2025-26633HighActively exploited
Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.
- CVE-2024-38259High
Remote Code Execution vulnerability in Microsoft Management Console. An attacker could exploit this vulnerability to execute arbitrary code on the target system.
Original NVD description (English source)
Microsoft Management Console Remote Code Execution Vulnerability