CVE Catalog
CVE-2026-42981
HighCVSS 8.1Exploitation Probability (EPSS)
Low risk0.64%
47th percentile - higher than 47% of all known CVEs
Summary
An integer underflow vulnerability in Windows Performance Monitor allows an unauthorized attacker to execute code remotely over a network.
Risk Assessment
An attacker can remotely execute code on a system running Windows Performance Monitor, potentially leading to full system compromise.
Recommendation
Install the security update from Microsoft for Windows Performance Monitor.
Other vulnerabilities in Windows Performance Monitor
Original NVD description (English source)
Integer underflow (wrap or wraparound) in Windows Performance Monitor allows an unauthorized attacker to execute code over a network.