CVE-2026-25166 — Windows System Image Manager Assessment and Deployment Kit (ADK) Remote Code Execution Vulnerability

Deserialization of untrusted data in Windows System Image Manager allows an authorized attacker to execute code locally.

Published: 2026-03-10 · CVSS: 7.8 · CVSS 3.1

Deserialization of untrusted data in Windows System Image Manager allows an authorized attacker to execute code locally.

Original CVE JSON · STIX 2.1

Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7