CVE-2026-40144
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
A memory-corruption vulnerability exists in a kernel-mode component of BeyondTrust Endpoint Privilege Management (Windows deployments) prior to version 26.1.2, due to insufficient validation of input, potentially leading to out-of-bounds memory access.
Risk Assessment
The vulnerability could lead to system crashes or privilege escalation, posing a serious risk to system integrity.
Recommendation
Update BeyondTrust Endpoint Privilege Management to version 26.1.2 or later.
Original NVD description (English source)
A memory-corruption vulnerability exists in a kernel-mode component of BeyondTrust Endpoint Privilege Management (Windows deployments) prior to version 26.1.2. Insufficient validation of input processed by the component may result in memory being accessed outside its intended bounds.