CVE-2026-20877

CVE-2026-20877 is a use-after-free vulnerability in Windows Management Services that enables a locally authenticated attacker to elevate privileges. The NVD entry specifies a CVSS v3.1 base score of 7.8 (AV: Local, AC: High, PR: Low, UI: None, S: Changed, C/I/A: High). Connected documents referen...

CVE-2026-20877 Windows Management Services Elevation of Privilege Vulnerability

...

CVE-2026-20865 Windows Management Services Elevation of Privilege Vulnerability

...

CVE-2026-20865

CVE-2026-20865 is a Windows Management Services use-after-free vulnerability that enables an authenticated, local attacker to achieve elevated privileges. The issue arises from a prior use-after-free in the Windows Management Services component, with exploitation requiring local access and no use...

CVE-2026-20865

Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally...

CVE-2026-20865 Windows Management Services Elevation of Privilege Vulnerability

...

CVE-2026-20858

Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally...

CVE-2026-20858 Windows Management Services Elevation of Privilege Vulnerability

...

CVE-2026-20858 Windows Management Services Elevation of Privilege Vulnerability

...

CVE-2026-20858

CVE-2026-20858 is a Windows Management Services use-after-free local privilege escalation (high risk, CVSS 7.8). Connected documents confirm it affects Windows Management Services and is tracked in Microsoft’s January 2026 security updates (e.g., KB5073379/KB5073457). Remediation is via the poste...

Windows Management Services Elevation of Privilege Vulnerability

Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally...

Windows Management Services Elevation of Privilege Vulnerability

Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally...

Windows Management Services Elevation of Privilege Vulnerability

Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally...

Windows Management Services Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Services allows an authorized attacker to elevate privileges locally...

Windows Management Services Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Services allows an authorized attacker to elevate privileges locally...

Windows Management Services Elevation of Privilege Vulnerability

Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally...

Windows Management Services Elevation of Privilege Vulnerability

Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally...

Windows Management Services Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Services allows an authorized attacker to elevate privileges locally...

Windows Management Services Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows Management Services allows an authorized attacker to disclose information locally...

Windows Management Services Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Services allows an authorized attacker to elevate privileges locally...