366 matches found
CVE-2026-77905
Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally...
CVE-2026-73012
Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a network...
CVE-2026-70582
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally...
CVE-2026-69451
Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges over a network...
CVE-2026-69349
Use of uninitialized resource in Windows Management Instrumentation allows an authorized attacker to disclose information over a network...
CVE-2026-77905
CVE-2026-77905 is a use-after-free vulnerability in Windows Management Instrumentation (WMI) that allows an authorized attacker to escalate privileges locally. The flaw carries a CVSS 3.1 score of 7.0 (HIGH) , with a local attack vector, high complexity, low privileges required, and no user inter...
EUVD-2026-73792
Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally...
CVE-2026-73012
CVE-2026-73012 is a heap-based buffer overflow in Windows Management Services that allows an authorized (low-privilege) attacker to elevate privileges over a network . The vulnerability is rated CVSS 8.8 (HIGH) with vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attack complexity and ...
EUVD-2026-73772
Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a network...
EUVD-2026-73083
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally...
CVE-2026-70582
Windows Management Instrumentation (WMI) is affected by a race condition caused by concurrent execution using a shared resource with improper synchronization. An authorized local attacker can leverage this to elevate privileges . The CVSS 3.1 base score is 6.4 (MEDIUM) , reflecting a local attack...
CVE-2026-69451
Windows Management Instrumentation (WMI) contains a use-after-free vulnerability that allows an authorized attacker to escalate privileges over a network. The CVSS 3.1 score is 7.1 (HIGH) with a vector of AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H, meaning exploitation requires network access , low priv...
EUVD-2026-72981
Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges over a network...
EUVD-2026-73229
Use of uninitialized resource in Windows Management Instrumentation allows an authorized attacker to disclose information over a network...
CVE-2026-69349
CVE-2026-69349 is an information disclosure vulnerability in Windows Management Instrumentation (WMI) caused by use of an uninitialized resource . An authorized attacker can exploit it over a network to disclose information, with high confidentiality impact but no integrity or availability impact...
Windows Management Services Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a network...
Windows Management Instrumentation Elevation of Privilege Vulnerability
Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges over a network...
Windows Management Instrumentation Elevation of Privilege Vulnerability
Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally...
Windows Management Instrumentation Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally...