CVE-2026-77905

Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally...

CVE-2026-69451

Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges over a network...

CVE-2026-69349

Use of uninitialized resource in Windows Management Instrumentation allows an authorized attacker to disclose information over a network...

CVE-2026-77905

CVE-2026-77905 is a use-after-free vulnerability in Windows Management Instrumentation (WMI) that allows an authorized attacker to escalate privileges locally. The flaw carries a CVSS 3.1 score of 7.0 (HIGH) , with a local attack vector, high complexity, low privileges required, and no user inter...

EUVD-2026-73792

Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally...

EUVD-2026-73083

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally...

CVE-2026-70582

Windows Management Instrumentation (WMI) is affected by a race condition caused by concurrent execution using a shared resource with improper synchronization. An authorized local attacker can leverage this to elevate privileges . The CVSS 3.1 base score is 6.4 (MEDIUM) , reflecting a local attack...

CVE-2026-69451

Windows Management Instrumentation (WMI) contains a use-after-free vulnerability that allows an authorized attacker to escalate privileges over a network. The CVSS 3.1 score is 7.1 (HIGH) with a vector of AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H, meaning exploitation requires network access , low priv...

EUVD-2026-72981

Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges over a network...

EUVD-2026-73229

Use of uninitialized resource in Windows Management Instrumentation allows an authorized attacker to disclose information over a network...

CVE-2026-69349

CVE-2026-69349 is an information disclosure vulnerability in Windows Management Instrumentation (WMI) caused by use of an uninitialized resource . An authorized attacker can exploit it over a network to disclose information, with high confidentiality impact but no integrity or availability impact...

Windows Management Instrumentation Elevation of Privilege Vulnerability

Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally...

CVE-2026-62738

Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally...

EUVD-2026-56772

Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally...

CVE-2026-62738 Windows Management Instrumentation Information Disclosure Vulnerability

...

PT-2026-70499

Name of the Vulnerable Software and Affected Versions Windows Management Instrumentation affected versions not specified Description An out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose sensitive information locally and affect the system. An...

CVE-2026-15379

CVE-2026-15379 : The Altiris WMI provider exposes the AltirisAgent_Stream class, allowing any local standard user to read files accessible to the SYSTEM context, bypassing filesystem ACLs. The provider uses LocalSystem context for WMI queries without re-impersonating the caller, enabling read acc...

CVE-2026-10590

A potential missing authentication vulnerability could allow a local privileged attacker to use WMI commands to arbitrarily trigger a System Management Interrupt handler...

EUVD-2026-44982

A potential missing authentication vulnerability could allow a local privileged attacker to use WMI commands to arbitrarily trigger a System Management Interrupt handler...

CVE-2026-10590

CVE-2026-10590 describes a potential local privilege escalation where an attacker could abuse WMI commands to trigger a System Management Interrupt (SMI) handler due to missing authentication. The CVSS data indicates a LOCAL attack with HIGH privileges required, no user interaction, and potential...