167 matches found
CVE-2026-77905
Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally...
CVE-2026-69349
Use of uninitialized resource in Windows Management Instrumentation allows an authorized attacker to disclose information over a network...
CVE-2026-77905
CVE-2026-77905 is a use-after-free vulnerability in Windows Management Instrumentation (WMI) that allows an authorized attacker to escalate privileges locally. The flaw carries a CVSS 3.1 score of 7.0 (HIGH) , with a local attack vector, high complexity, low privileges required, and no user inter...
EUVD-2026-73792
Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally...
EUVD-2026-73083
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally...
CVE-2026-70582
Windows Management Instrumentation (WMI) is affected by a race condition caused by concurrent execution using a shared resource with improper synchronization. An authorized local attacker can leverage this to elevate privileges . The CVSS 3.1 base score is 6.4 (MEDIUM) , reflecting a local attack...
CVE-2026-69451
Windows Management Instrumentation (WMI) contains a use-after-free vulnerability that allows an authorized attacker to escalate privileges over a network. The CVSS 3.1 score is 7.1 (HIGH) with a vector of AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H, meaning exploitation requires network access , low priv...
EUVD-2026-72981
Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges over a network...
EUVD-2026-73229
Use of uninitialized resource in Windows Management Instrumentation allows an authorized attacker to disclose information over a network...
CVE-2026-69349
CVE-2026-69349 is an information disclosure vulnerability in Windows Management Instrumentation (WMI) caused by use of an uninitialized resource . An authorized attacker can exploit it over a network to disclose information, with high confidentiality impact but no integrity or availability impact...
CVE-2026-62738
Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally...
EUVD-2026-56772
Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally...
CVE-2026-62738 Windows Management Instrumentation Information Disclosure Vulnerability
...
PT-2026-70499
Name of the Vulnerable Software and Affected Versions Windows Management Instrumentation affected versions not specified Description An out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose sensitive information locally and affect the system. An...
CVE-2026-15379
CVE-2026-15379 : The Altiris WMI provider exposes the AltirisAgent_Stream class, allowing any local standard user to read files accessible to the SYSTEM context, bypassing filesystem ACLs. The provider uses LocalSystem context for WMI queries without re-impersonating the caller, enabling read acc...
CVE-2026-10590
A potential missing authentication vulnerability could allow a local privileged attacker to use WMI commands to arbitrarily trigger a System Management Interrupt handler...
EUVD-2026-44982
A potential missing authentication vulnerability could allow a local privileged attacker to use WMI commands to arbitrarily trigger a System Management Interrupt handler...
CVE-2026-10590
CVE-2026-10590 describes a potential local privilege escalation where an attacker could abuse WMI commands to trigger a System Management Interrupt (SMI) handler due to missing authentication. The CVSS data indicates a LOCAL attack with HIGH privileges required, no user interaction, and potential...
CVE-2026-7539
A potential security vulnerability has been identified in the HP Accessory WMI Provider installer for some HP Docking Stations, which might allow escalation of privilege and/or arbitrary code execution. HP is releasing software updates to mitigate the potential vulnerability...