Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Platform/x86: dell-wmi-sysman: Fixed the retrieval of WMI data blocks in sysfs callbacks. After retrieving WMI data blocks through sysfs callbacks, it is necessary to check the validity of these data blocks before dereferencing...

CVE-2026-77905

Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally...

CVE-2026-73012

Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a network...

CVE-2026-70582

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally...

CVE-2026-69451

Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges over a network...

CVE-2026-69349

Use of uninitialized resource in Windows Management Instrumentation allows an authorized attacker to disclose information over a network...

CVE-2026-77905

CVE-2026-77905 is a use-after-free vulnerability in Windows Management Instrumentation (WMI) that allows an authorized attacker to escalate privileges locally. The flaw carries a CVSS 3.1 score of 7.0 (HIGH) , with a local attack vector, high complexity, low privileges required, and no user inter...

EUVD-2026-73792

Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally...

CVE-2026-73012

CVE-2026-73012 is a heap-based buffer overflow in Windows Management Services that allows an authorized (low-privilege) attacker to elevate privileges over a network . The vulnerability is rated CVSS 8.8 (HIGH) with vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attack complexity and ...

EUVD-2026-73772

Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a network...

EUVD-2026-73083

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally...

CVE-2026-70582

Windows Management Instrumentation (WMI) is affected by a race condition caused by concurrent execution using a shared resource with improper synchronization. An authorized local attacker can leverage this to elevate privileges . The CVSS 3.1 base score is 6.4 (MEDIUM) , reflecting a local attack...

CVE-2026-69451

Windows Management Instrumentation (WMI) contains a use-after-free vulnerability that allows an authorized attacker to escalate privileges over a network. The CVSS 3.1 score is 7.1 (HIGH) with a vector of AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H, meaning exploitation requires network access , low priv...

EUVD-2026-72981

Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges over a network...

EUVD-2026-73229

Use of uninitialized resource in Windows Management Instrumentation allows an authorized attacker to disclose information over a network...

CVE-2026-69349

CVE-2026-69349 is an information disclosure vulnerability in Windows Management Instrumentation (WMI) caused by use of an uninitialized resource . An authorized attacker can exploit it over a network to disclose information, with high confidentiality impact but no integrity or availability impact...

Windows Management Instrumentation Elevation of Privilege Vulnerability

Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges over a network...

Windows Management Services Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a network...

Windows Management Instrumentation Elevation of Privilege Vulnerability

Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally...

Windows Management Instrumentation Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally...